last executing test programs: 5m0.911154197s ago: executing program 1 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x106) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) getdents(r1, 0xfffffffffffffffd, 0x58) 5m0.822576798s ago: executing program 1 (id=121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m0.334828895s ago: executing program 1 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffa}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x9e}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 5m0.334614704s ago: executing program 32 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0xb, 0x0, 0x3, 0x7fff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffffa}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x4, 0x0, 0x0, @void, @value}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000140)=@sr0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000ac0)=[{{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x2, 0x1}, {0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}], 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x396, 0x0, 0x0, 0x0, 0x9e}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 4m49.428483225s ago: executing program 33 (id=395): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 4m45.19870665s ago: executing program 34 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@grpid}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@orlov}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x462, &(0x7f0000000f80)="$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") 2m50.420681267s ago: executing program 35 (id=2911): add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 2m43.087005781s ago: executing program 2 (id=2995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) unshare(0x2040400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVed:De', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fremovexattr(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="5c00f57f000000000000000000"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) fcntl$notify(r7, 0x402, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) 2m42.982740532s ago: executing program 2 (id=2998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m42.824406694s ago: executing program 2 (id=3002): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) utime(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') name_to_handle_at(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="100000000200000000ffffffffffffff0000000060839171"], &(0x7f00000002c0), 0x200) 2m42.782657855s ago: executing program 2 (id=3003): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x7af, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@fallback=r1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() flock(r3, 0x6) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000300)=0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0), 0xff, 0x262, &(0x7f0000000ec0)="$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") r9 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10) 2m42.36736229s ago: executing program 2 (id=3010): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x2f, 0x8, 0x4, @void, @value}, 0x20) 2m42.294112661s ago: executing program 7 (id=3013): setrlimit(0x0, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) 2m42.091283334s ago: executing program 7 (id=3015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m42.034986824s ago: executing program 2 (id=3016): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r5 = eventfd2(0x0, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 2m42.016503115s ago: executing program 36 (id=3016): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r5 = eventfd2(0x0, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1) io_submit(r4, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) 2m41.901606536s ago: executing program 7 (id=3018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 2m41.838224297s ago: executing program 7 (id=3020): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x7af, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@fallback=r1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() flock(r3, 0x6) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000300)=0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0), 0xff, 0x262, &(0x7f0000000ec0)="$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") r9 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10) 2m40.474571665s ago: executing program 7 (id=3033): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m40.294207157s ago: executing program 0 (id=3036): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m40.147749709s ago: executing program 0 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 2m40.09594066s ago: executing program 7 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1c, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000003000008000000b7040000f600000085000000430000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup, r2, 0x4, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x2431, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x39, 0xa6e253e6046e0a6e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) fchmod(r8, 0x43) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x2e, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185100000700000000000000000000007a46c0ffffffffff18470000faffffff000000000000000085000000c200800018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b7080000000000007b8af8ff00000000b708000000090000008af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x7, 0xf8, &(0x7f0000000a00)=""/248, 0x40f00, 0x56, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000b00)=[r3, r3], &(0x7f0000000b40)=[{0x2, 0x5, 0xc, 0x8}, {0x400002, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x6}, {0x1, 0x4, 0x1, 0xa}, {0x0, 0x5, 0x5, 0x8}, {0x4, 0x5, 0xb, 0x6}, {0x2, 0x1, 0xc, 0xb}], 0x10, 0x35, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0xffff918c}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000600)=""/224, 0x40f00, 0x22, '\x00', 0x0, 0x19, r8, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xa, 0xc08, 0x101}, 0x10, 0x24754, r9, 0x6, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r3, r0, 0xffffffffffffffff, r10], &(0x7f0000000d00)=[{0x1, 0x5, 0xf, 0x4}, {0x0, 0x3, 0x6}, {0x1, 0x1, 0xd, 0x6}, {0x4, 0x3, 0x7}, {0x2, 0x5, 0x3, 0x4}, {0x4, 0x3, 0x3, 0x8}], 0x10, 0x9, @void, @value}, 0x94) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r14, 0x9c3fa077fa966179, 0x0, 0x25dfdbfd, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x24040050) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r15 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r15, &(0x7f0000000000)={0x27}, 0x74) 2m40.002376571s ago: executing program 37 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1c, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x16, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000003000008000000b7040000f600000085000000430000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup, r2, 0x4, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x2431, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x39, 0xa6e253e6046e0a6e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) fchmod(r8, 0x43) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x2e, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185100000700000000000000000000007a46c0ffffffffff18470000faffffff000000000000000085000000c200800018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b7080000000000007b8af8ff00000000b708000000090000008af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x7, 0xf8, &(0x7f0000000a00)=""/248, 0x40f00, 0x56, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000b00)=[r3, r3], &(0x7f0000000b40)=[{0x2, 0x5, 0xc, 0x8}, {0x400002, 0x2, 0x3}, {0x3, 0x3, 0x8, 0x6}, {0x1, 0x4, 0x1, 0xa}, {0x0, 0x5, 0x5, 0x8}, {0x4, 0x5, 0xb, 0x6}, {0x2, 0x1, 0xc, 0xb}], 0x10, 0x35, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r4, {0xffff918c}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000600)=""/224, 0x40f00, 0x22, '\x00', 0x0, 0x19, r8, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xa, 0xc08, 0x101}, 0x10, 0x24754, r9, 0x6, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, r3, r0, 0xffffffffffffffff, r10], &(0x7f0000000d00)=[{0x1, 0x5, 0xf, 0x4}, {0x0, 0x3, 0x6}, {0x1, 0x1, 0xd, 0x6}, {0x4, 0x3, 0x7}, {0x2, 0x5, 0x3, 0x4}, {0x4, 0x3, 0x3, 0x8}], 0x10, 0x9, @void, @value}, 0x94) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r14, 0x9c3fa077fa966179, 0x0, 0x25dfdbfd, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x24040050) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r15 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r15, &(0x7f0000000000)={0x27}, 0x74) 2m39.995637731s ago: executing program 0 (id=3043): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) dup3(r1, r0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1000000000000}, 0x18) 2m39.620316506s ago: executing program 0 (id=3044): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x7af, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@fallback=r1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() flock(r3, 0x6) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000300)=0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0), 0xff, 0x262, &(0x7f0000000ec0)="$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") r9 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 2m39.042638293s ago: executing program 0 (id=3047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m38.738218517s ago: executing program 0 (id=3048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) munlockall() 2m38.706298998s ago: executing program 38 (id=3048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) munlockall() 2m33.502436054s ago: executing program 1 (id=3042): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x7af, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@fallback=r1, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() flock(r3, 0x6) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000300)=0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0), 0xff, 0x262, &(0x7f0000000ec0)="$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") r9 = open(&(0x7f0000000000)='.\x00', 0x400, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)=0x10) 2m32.768295464s ago: executing program 1 (id=3074): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) utime(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') name_to_handle_at(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="100000000200000000ffffffffffffff0000000060839171"], &(0x7f00000002c0), 0x200) 2m31.282429623s ago: executing program 1 (id=3094): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r0, 0x0, r2, 0x0, 0x1d2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x800, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) lsetxattr$security_selinux(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) close(r5) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x12}, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@dev}, {@multicast1}, {}, {@private}, {@multicast1}, {@initdev}]}}) 2m30.882290258s ago: executing program 39 (id=3094): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) splice(r0, 0x0, r2, 0x0, 0x1d2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x800, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) lsetxattr$security_selinux(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) close(r5) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x12}, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@dev}, {@multicast1}, {}, {@private}, {@multicast1}, {@initdev}]}}) 41.804933622s ago: executing program 3 (id=5066): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) open(&(0x7f0000000000)='.\x00', 0x400, 0x0) 41.760503762s ago: executing program 3 (id=5069): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='context=']) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x539, &(0x7f0000003d80)="$eJzs3U9sHFcZAPBvxnZ2k7p1inoAVGgohYCi7NqbNqp6aTlVCFUCeuSQGntjWdnNRtl1qd0cnCN3JCJxghNnDkgckHrijsQBblzKAalABKqLkBi0s7v2+s/aS+LdTby/nzTaN/Nm5/ueRvOe9TaZF8DUuhQR2xFxLiLei4iF7vGku8Vbna193qcP763sPLy3kkSWvfv3JK9vH4u+77Q9071mMSK+/3bED5MDQf8Q0dzcurVcq1Xvdg+VW/U75ebm1tX1+vJada16u1K5vnR98fVrr1VOra0v1X/1yfmI+O1vvvTx77e/+WE7rfluXX87TlOn6XO7cdpmI+I7owg2ATPd9px7lC8/0pc4TWlEfC4iXs6f/4WYye/mfvtv05tjzA4AGIUsW4hsoX8fADjr0nwOLElL3bmA+UjTUqkzh/dCXEhrjWbrys3Gxu3VzlzZxZhLb67XqovducKLMZfcXJ+tLuXl3n6tWjmwfy0ino+InxTO5/ullUZtdZJ/+ADAFHvmwPj/r0Jn/AcAzrjiXrEwyTwAgPEpTjoBAGDsjP8AMH2M/wAwfYz/ADB9jP8AMH2M/wAwVb77zjvtLdvpvv969f3NjVuN96+uVpu3SvWNldJK4+6d0lqjsZa/s6d+0vVqjcadpVdj44Nyq9pslZubWzfqjY3brRv5e71vVOfG0ioA4DjPv/TRn5KI2H7jfL5F3/v+TxyrXxx1dsAopZNOAJiYmWPq/j3GPIDxO7zaFzAtzMfD9PpvlmXRt3ZvRNzfLfW9DHTgPxF6sFv67Htx4Ep70oPrhl6x9itM3OUvPMb8P/BUM/8P0+uo+f+T1wB4cyS5AONl/h+mV5Yl1vwHgCljjh848lf7Pv2//y9mfTsPRpQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAXm8y1JS921wOcjTUuliGcj4mLMJTfXa9XFiHguIv5YmCu095ciwrpBAPA0S/+adNf/urzwyvzB2nOFzwr5Z0T86Gfv/vSD5Vbr7lLEueQfu8dbD7rHK5PIHwA4SW+c7o3jPZ8+vLfS28aZzyff6iwu2o670906NbMxm38W87mGC/9Muvsd7b9XZk4h/vb9iPj8Ue1P8rmRi92VTw/Gb8d+dqzx033x07wu/7z84SnkAdPoo3b/89ZRz18al/LPo5//Yt5DPb5e/7dzqP9Ld/u/mQH936VhY7z6u28fOpgtdOruR3xxNmKnd/G+/qcXPxkQ/5Uh4//5xS+/PKgu+3nE5Tiq/cm+WOVW/U65ubl1db2+vFZdq96uVK4vXV98/dprlXI+R13uzVQf9rc3rjw3KH67/RcGxC+e0P6vDdn+X/znvR985Zj43/jq0ff/hWPit8fErw8Zf/nCr4uD6trxVw+1P8uy7OT7f2XI+B//ZWt1yFMBgDFobm7dWq7Vqncfv1A89pz0NEIMUUgitkccYq9Q+OWP3z755MLY8nnEQgyqmnlSMjwzhcKTkcYQhUn3TMCo7T30k84EAAAAAAAAAAAAAAAYZKj/D3T+/zn5cGHCTQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAM+18AAAD//+t82ng=") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) mmap(&(0x7f000015f000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r6, 0xd4559000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xfffffffffffffffe}) pipe2$9p(&(0x7f0000000000), 0x84000) 41.336284658s ago: executing program 3 (id=5074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000002400)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1045}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xb6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffb) (async) sendfile(r5, r5, 0x0, 0x800000009) (async, rerun: 32) r6 = socket$inet(0x2, 0x3, 0x2) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400000bb703"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) (async, rerun: 64) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(r9) 41.038302622s ago: executing program 3 (id=5077): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) 41.008575072s ago: executing program 3 (id=5080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9babfd2914c492f58e32475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ee99a1f93a6cebd52f22eb93bcedf37f4cc3982b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4844903619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b69eafd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f1a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a87e1b121adb5812ee1769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf803defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d7ea9ce9b0b9d2c2e2ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90cfc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25ad27b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a13103", 0x1000}}, 0x1006) fallocate(r4, 0x0, 0x3, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0xc, r4}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 40.854558494s ago: executing program 3 (id=5083): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) timer_create(0x2, &(0x7f0000000180)={0x0, 0x28, 0x4, @thr={&(0x7f0000000c00)="b49f483d7b1a37b7e499134a4c5d90d4dc2ae36340ae1f2f101c01e48c452235955e09ac0a6cc5894312b78bb13103d10cf9996ad85c7245a4a1e892a4265cbfe6", &(0x7f0000000c80)="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"}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x1, 0x10}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x7800, 0x1, 0x20, 0x5, {{0x2a, 0x4, 0x1, 0x2, 0xa8, 0x67, 0x2, 0x6, 0x4, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x2, [{@local, 0x1ff}, {@private=0xa010100, 0x2}, {@multicast2, 0x1}, {@multicast1, 0x7fff}]}, @generic={0x86, 0x10, "ac2da364145aefbd96ab081a898a"}, @rr={0x7, 0x17, 0xa9, [@loopback, @empty, @multicast2, @multicast1, @multicast1]}, @timestamp={0x44, 0x24, 0xab, 0x0, 0x5, [0x0, 0x9, 0x5, 0xffffffff, 0x1, 0x2, 0x6, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0xa, [{@empty, 0x7fff}, {@multicast1}, {@remote, 0x3}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8, 0x0}, 0x8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0x9, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0x51, &(0x7f0000000540)=""/81, 0x41000, 0x29, '\x00', r4, @fallback=0x25, r5, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xe, 0x7, 0x9}, 0x10, r6, r2, 0x5, &(0x7f0000000a80)=[r0, r1, r1, r1, r7, r1, r1, r1, r8, r9], &(0x7f0000000ac0)=[{0x1, 0x40, 0x10, 0x9}, {0x1, 0x3, 0x7, 0x5}, {0x2, 0x3, 0xa, 0x1}, {0x4, 0x1, 0xe, 0x6}, {0x1, 0x3, 0xa, 0x7}], 0x10, 0xe, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = epoll_create1(0x80000) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f00000000c0)={0xe000001a}) preadv(r12, &(0x7f0000000640)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x800000f5) ppoll(&(0x7f00000001c0)=[{r11, 0x1065}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r10}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x8, 0x9, 0x4, 0x8}, {0x6, 0xff, 0xfa, 0x101}, {0x0, 0x6, 0x3, 0x3ff}, {0x7, 0x1, 0x5, 0x9}, {0x9, 0x9, 0x9, 0x6}, {0x1, 0x5, 0x27, 0x4}, {0x3b5, 0x0, 0x2, 0x401}, {0x7, 0x45, 0x34, 0x9}]}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r15 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r15, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 25.787032918s ago: executing program 40 (id=5083): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) timer_create(0x2, &(0x7f0000000180)={0x0, 0x28, 0x4, @thr={&(0x7f0000000c00)="b49f483d7b1a37b7e499134a4c5d90d4dc2ae36340ae1f2f101c01e48c452235955e09ac0a6cc5894312b78bb13103d10cf9996ad85c7245a4a1e892a4265cbfe6", &(0x7f0000000c80)="f85f8af6e9c031b22a442a180d90eabefd20654e5ffe61319f49afbe59e95fe52b81cc9c158ae78f96a36d902af4a0f1e0124b221b90034ddc67a82f794e37b65e7fd978c77e620f65411d6577fbf9cc8eda9e6e5386ec6b143f07bb7f97aa981d95c28b78c4689adfc9c34297c306fb4d503f8eafdba409a63a3d10c637e65bb27a4e2d7568a20c34dff8f6aa474fabe411971cf5c0d146926cf5565f69b5b0fc20d2ef05366dbef2985279b8f19066526a86fd121bbeb86910fdb949be373aad0b25c723332de24a4609a12c92bf3a84d4c9feb625ada99418b42b9569fbc27643ed0409b3e50144514e2584e453b48a23428e38c3c4fbfb1bc5fa445caa6f250ae8c55d4f75a6e0986ec3f68ddfe44d82452138a6df86dc0550711171e001a9d754e88b77df84676c77092d14e4cb840aede623fe4ff300ba4562fbaacf8b7b8c59f36dabf619c4fb310dc93a097fc2c78be0bf790269971ca7e73d66bcda0d37caf2b7a52ffb9534c322aace1c66ed45b258cea4395fdacc8fa3879ae6829b675146079939fe38091e08d31c629402b9670b42a06204ee70e460944b48a24568aabad1f315c22e0c7b4f1a0303c3d0ac30645f15e1f375aa60362511733682ebb8efb41c2454eb45ee105e3319e2a4efc7c4c27391cd55beb10f35dccf353da9f1be5d49567d6a43ce641d1b78137ece53d270d58664828c9384655a3a6eebc7edc680ededf60461bd7ddf125e5428864cd4d99c45ed9fcfda23623fca5aff85392aba4bf12be36dd92c9bf4d420b0c90665058c5c6cca8aa10d6737c0ee37499431f8da890125038b525b9415a8e7eed2fe94563e9b3f20ba17ce561601de4dbe75a1f12b2dadc134b5782724bafa738529f119d6cf4445f21c0c0ab448e8bae2c7e2b633d003485db998278bc695e7896cd70ae71566e03898560bd2c013db312e89a5b0c8450cd65b5c8d18d67de4d6fd41be5f290136c7fbe6c49b20589337a828c8b0c0bd39ecf8f92c0cc086c17a67cb5825ca8e2955b548448fcc5cf21d3d2d657fc6ad4db55c578588b346d5c5e67e2f8fe9ea60992dced3cc753450bd5909dd9479fcd5054b76f5c18dd971c400e23ea65606021b063c164d0c604e4d6f08067e8f34a87106b621794f2fc984f04f67f4854497986f9597b74a649ecd0f19ea8da1be19b026f2bbeb4b1279d8ccf4bdd6841cebfecfae06043ab2d0b42f4d0afd1e34aee4b0a5ad3b6484246ef61c80770832fe3245265829ce924f5b10a1d19e3e3bbc4e2030f0d53852d6a005c632aa338a49aa586467b30752efdaf718cd23ab1197ed02d2608a94889ebcf1a88b0e47e4edf313c11967250d47d78ea370baf45dc55871c9032b89660beb054d62288a8d4cdd7492dfafa827d808810104565dd3ad3229d1abd89186c3fe5fdd90696e3691ae49a89f28ce1cf08f97da94f1bdf566afb330d1979c2164b51d6eead109245d0b2b5ce92b43799161791c0693929cf512793956f8f1fc271310e29ad4d44ee6b7a7e38657b7f82087e139a6e55ec812fcb68b0eaa3519b8703ee5a04e102d519e16812c29d712ff4058bae2b4dae6da69dde20d5a2cc1fea58dcc92f79cee0ed246ef6f073aeabe4e29410dab5b750c2ace3afa79da9799b4619dfd3d68c9ddcab558f0df0d82e70799df5033cf37169b06ec79109af625ed6e4e566863ccccafbb58e96268e246145de2d3b9bc0918a26c3be6d462999371c9a77940fe3950e1647c7e4b144348d3cebc80322bd2ea05759c1ea5448fb144df8be81abc3e0c458934a46ceb6cb8f287058e58af7a0cec0ad6c075a5b2f2eed05539bdf3f3bc619678ccf2f030580ddee51fab8e421156045769aab205f3f92cd242d121bcf2aa5abdc92354e4196440766260822103420e2c6c3a9d8cbd070611c88fd0bf6140cb8a5784de86d7117a1c79194be5329c140b42ba0249d60022966139bbdc01e0a5f32f19bb7b0e6dad944b222b445f15886869bf37036eae9e903592f0f30e7cc065f145dd7965a9cd4b2b9efb827a04bc71433bf1875ab4fc56b6d550bb36e64a0cf0b4c26baa543a794b759c12b07d5469944ee68d503c30dd5adbebba3b5ec8c564b466b1f4a4129a46b87bbb8870125552b79eeae34e9a0166b4bd747d4269dd4f26f83369a95cacaf942b542b0e18e9bf39f48a28a99a1313d53c9c6e20ae243ee682ed8a8091410f2e1bb84c2e2b99a35558fb1b5e5a410da938db2086e9e30711d18a0d74fb3129a0a5cfee1c7c05965aa918e37942d0e0d19613d04deaad543a568e1c55e19a028684366e15719c21f4a5433cf48064ee833ea9f05df9fd37863394ab501c2929f3d6b0ef7a1afcec2115e38e1f5048681f7012fc06f80ebf21b7578b50e74476945b02f0c407cf10275e95eaa38e6d9a3bcb4d209085e99a1b4df1c8b36fdf0b90bc2a2413c957671d75c0103720cd71e763aae4f76dc471ce38a4db7a7d3d89b651f7e50a99c23e3f4c006656410fd8ae8159863dc803345f3986f17c2eea3435ecd40f832fe3edea1c1d20d8f7b3141360f804e766024b281b3a9e868c6eccd0de553fda5b94f8a17f165e53280b810e686b9ab1abaae5b798a1cfe91ada74387c23e1952208884ca183cfec00e44be5deb2157751207181c6610b6a7ed0288f4ca300db23ab23faed487cedaa1b57f6794198048d3d8e1224fe501ad99f0f7cc650fff4b562a7ea8b268ed7225ffb4bb0c85b4938e31f40062e48ce95b3a8ea4174540a3264485dae755f9161b0d34653bd43bb4e5f53efad35a764c00887e621fee9349bc8a39d6424f1ea49d018c66dbd0bca07f8712398842ebecb6bef9c2cc2bf6d60d783a8d2a652790ab3d079a95f73a6708b081cb8b1a933a16daed430fb5d42af0c3f26e7943aedd3e4c085f022bb59902097b055c6715b524328b12511755850fb5032b56c76cf64e64ab78b1ab407a0c0485f5374ba70ed6ec3fdcaf0dbac06fd6183a17cef69eb808e31adf9664b73722e807f0b2c2c99b078773a09c02d611059650cef0ba67e92a6652cbac3aeff6291a6e777c90e2fba4a73afc670c39d3093e70e405daa5ce6494858e6d6e8d8bd747974999a89094bffa11b9ee4d84fce3dc859e9a78a9f75843ffe11c13fb8879f9febcaca412c6436587dc1d3b4587053f932e92a27c8ae8cc58f115ce232d34ed6310f750e1473c4ee775c3825c6f31a860627a37f06348b60af28c9b87b20f83b005df73abe81472c7c99247b7580b266b2a25538a03ca87a21518be32c49278d18af47a9cdde747cb0153684b1f83e0d7166fe9228c32a8b5c0909e21dc1c988d791e6f40ded9c9caf70244dcadeff945fb9cafc80c51d4556502ea4b03b5d9a0993f81d541fb67a06bc7d962e615c4b9ea0e324dfaec3d96f3ef02730ad3875a0ab7697144a6285bb6b951e43f80311bc46caf219b0c9b2de49771b6e82e82b88dd2a7785d01fc56c397cf9f0610916fd44869b6d5531dd53301635f9c150042a6554255bc805d0e2feece4eadc828ce768b8755c845bb09a15c660f1e78278f7830403c7d82b52168e061245d9bddafdbfe7976d0fbf74b7d3a67008e53420b54ef63932af1eccd40333fc1dc47da7b05fef59ea91c89be9c05573dac970609c590615402822c9780a8527abd0e78cb2099a9179e5a5e239bbdf3d7d221bd6919f25c9fe1860574e1c766ab9a1699c2f2a0af1a7dd6746fb231795d9d2fab74608ec6b692e9a4e40b493ddb0ef61442e4481cc0114a5a79dc1160eb7c612b2110ffc3667085fe9ebe497412280e0eee1177ada7e5f02eea06f7335de8b57568576b6b861ddae93a2baf67e18cf068aa7784715f81402ccbfd384f06b1fe2892129711f4be5cc6ce7145e774653275cf4350bd2b8022e328ba6adec467c826903b177e730a6f70a770ad9639185ce90b8552d60ea10218338ec77dfcfba5331749849f1e36cb1da129cabf63e46ae8e095dd995afb6ee1ddd9542ec83bc6369717ba01bbd21ea455cbc74ade42ec2a349c781cfc3cceeb1dbd5edb7fafaa7199c2718ae043dd41c3f72e0a63197a921fe341e2cfd89780f7f17d4f28ab2dc6afa2665c972ef0ae4e0209e8c168b39ac599b408da812a8bb9fcc97c027d87c79f475ed4eab769055bdd346c806f5d3831910a125f99293bbf3f5c7b502ec09b77fc80b87c81afbb25fc5bd3d14de20b60f4f72367e7e2205e4d15ea6b976690f1da0959b35af8f08893d69b251c86a802a054e51cd0fbf3cabd73b8e257fc8c7076acc201d1a87e99e21c4f0e44a8d3eb0cea49198f959d554ee2647e67ab0576ee2ccb3300ad58dbcb5e56840d8d05076fa33b646144a040b29d2a5b78e4bd8f35d83355eb587d11bca7a2dc805494bd22af1fd9f19d2855b231d669466a6ba264ecb48a7ee1f0440e1e73391b7d5a4d984bf86bec4b18befe6e2e98b65b75f70f46e50dc1c554c12b313f2b708598dc9e97f505a3b8af4a43594795586ebd60660b081b5cadc21c625f442900e642e838e0667345059ca119c10c3eb21cc64233fd9a03d59e9e2d86a5f80566c8838e28ab9b3652f61f7d5765a96100f9567bffcbbdc6518cd63b978ae0e961bba98539f6d97afda572cca9f4b2079637a7c90273bb5592df9aa2142185e0f056eaade82444a7f200928591156a37c3ba013b56686056e468dfc8f4b6d3f16ed0458cfb5f8c5c733d6956041a550872262f27ae81a7e9c1380311969a018f8deeb3f0efe303b378ce71277c9b6c0a94a6f4dfd4a1121a4972349903587afeb62f75f0f54aeb558c97158f0b8c1b6ede4e9493c2275a2f26f9ec4279bdc21303af4c1bd49891d07ca3933e155a097af1b71cb086a053d714580e7b019e278a71829359d872f734ea37cb7f6b3dcee3c372701559c3d0ba5086c983cf242425a9542ca99416bd729b66869f9ac5dea3232d6825f47532ca26f1441187403702249bcef02008963ee0dd36d2f5038d5e61295af0d41ed180e403014ff106852164ce7948c324c3447ede9eca0e8f81b4a18bded72ea0a0c657bd268ed174f6b819df2af62279d0484914b71cdedf226b580fd22f965502d75563b5fd2caf4f719f2a38cf7c839e88e5b4f2b0954f8c698c0a6f3aada1e4d56bf7586333cb99a0b37891f1ba1dba91afd6c7838b67d6d299cb96542dc07dfbf2e562e0dd621018fbe34604470d8bbb63d74a9edfa4094b07c13e71f407ee7d28f9b55fd5c82689cf86744f5fa67a55744cadc0ace8077de4ed24f8368d0d7616da7bd99dde76da612dc01851422fccf56945c7e1fdbcea712f4b3be079247f37f037b1d0d9f14f28cc0a06cdf97ae672c63b977acee58f60e1fc24fb2823f2eca2e99922492c8e44b41193d14a82168670b41b010d35373e2b10ad366d28a8e31cfc156ff694e88d3519f782b9d6f3cc673a8de47ad5f7a1704b1ab1e04021c51f404e97cfc8842701851c167fc0008cc8306ff1eeb6d5b946e33b3337d92158706706e22b307cb066b8576ef259e6d5fe7ce988adf36d6ab4a3e86a2a749efa8fafcc3a5f5945b2df5891a3aa1cf1296c4b76fb227a824f2b1af485eee75ce376e8d138e1238739cbc21e64f7bb673baa1131eb31d2cb30c45648e061b0c3c7a8e5a11917d6cd9d6aee1a4311e28a0d3c598765a94d4528f5b1923fab7156b6e1bbcf75b400c099bd3b1fc48259a122db2e4d0bda44e306457c90a711d09f4e71314d35a2496702043bd4a7f26d0e3ab82254c6e13cf000c4c97b5"}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x1, 0x10}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x7800, 0x1, 0x20, 0x5, {{0x2a, 0x4, 0x1, 0x2, 0xa8, 0x67, 0x2, 0x6, 0x4, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x7, 0xd3, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0x2, [{@local, 0x1ff}, {@private=0xa010100, 0x2}, {@multicast2, 0x1}, {@multicast1, 0x7fff}]}, @generic={0x86, 0x10, "ac2da364145aefbd96ab081a898a"}, @rr={0x7, 0x17, 0xa9, [@loopback, @empty, @multicast2, @multicast1, @multicast1]}, @timestamp={0x44, 0x24, 0xab, 0x0, 0x5, [0x0, 0x9, 0x5, 0xffffffff, 0x1, 0x2, 0x6, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0xa, [{@empty, 0x7fff}, {@multicast1}, {@remote, 0x3}]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x8, 0x0}, 0x8) pipe2$watch_queue(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0x9, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0x51, &(0x7f0000000540)=""/81, 0x41000, 0x29, '\x00', r4, @fallback=0x25, r5, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xe, 0x7, 0x9}, 0x10, r6, r2, 0x5, &(0x7f0000000a80)=[r0, r1, r1, r1, r7, r1, r1, r1, r8, r9], &(0x7f0000000ac0)=[{0x1, 0x40, 0x10, 0x9}, {0x1, 0x3, 0x7, 0x5}, {0x2, 0x3, 0xa, 0x1}, {0x4, 0x1, 0xe, 0x6}, {0x1, 0x3, 0xa, 0x7}], 0x10, 0xe, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = epoll_create1(0x80000) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f00000000c0)={0xe000001a}) preadv(r12, &(0x7f0000000640)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x800000f5) ppoll(&(0x7f00000001c0)=[{r11, 0x1065}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r10}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x8, 0x9, 0x4, 0x8}, {0x6, 0xff, 0xfa, 0x101}, {0x0, 0x6, 0x3, 0x3ff}, {0x7, 0x1, 0x5, 0x9}, {0x9, 0x9, 0x9, 0x6}, {0x1, 0x5, 0x27, 0x4}, {0x3b5, 0x0, 0x2, 0x401}, {0x7, 0x45, 0x34, 0x9}]}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r15 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r15, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 2.185129091s ago: executing program 8 (id=5708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r5, 0x0, 0x8000000000}, 0x18) close(r3) 2.175808782s ago: executing program 6 (id=5709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x8000000000}, 0x18) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) 2.163968172s ago: executing program 8 (id=5710): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r1, r1, 0x7, 0xce2d3afaee448c72, 0x4, @void, @void, @void, @value}, 0x20) socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0bf1417cf87f1343aeffe4000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000360000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000b40)=@allocspi={0x1a4, 0x16, 0x1, 0x70bd2c, 0x25dfdbff, {{{@in6=@mcast1, @in=@remote, 0x4e21, 0x3, 0x4e24, 0x3, 0x2, 0x20, 0x20, 0x84}, {@in6=@empty, 0x4d4, 0x50}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0, 0x9, 0x10400000, 0x7, 0x6}, {0xb73, 0x4, 0xe50, 0x2}, {0x5, 0xffffffff, 0x8}, 0x70bd2d, 0x3500, 0x2, 0x3, 0x4, 0x11}, 0x1, 0x4}, [@coaddr={0x14, 0xe, @in=@multicast2}, @algo_auth={0x95, 0x1, {{'wp512\x00'}, 0x268, "133401abbb983f545d7ec533027a891a145940c4297b142ae0b48ae5c8412cce2d92d2a5a4e6d4055402fb754e33f7bbd22039f94d1e724b7a7fa7b6e85c5f131633dcd07e5092bd019132138a"}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x3}, 0x40) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x600}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.155776272s ago: executing program 6 (id=5711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1426ce1c3830e17c0000000000000000a4e95805bebf5c38a8d576bbb12f3181a8e95118b1e76af0ab19b014b4d5a8d231ba1ad83817402fc832a5105c8f0501931822e6307afed7e247360cc928f86dc0d28d31a7c71ed56bed489e4459cd7a26510928adc79cff1f612bd214f674cd24de1ef332e3d0a88eb58d75adc822e382b2e89b2c2247cce78e952344642dee7ffe8d87553a3f3fd70a"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010004b042cbd7000fddbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a00010013"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000b03ef979fabcbd3363b100000000b7040000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={r8, 0x1, r6, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000280)={r8, 0x0, 0x5}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) 2.066550903s ago: executing program 8 (id=5712): socket(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x6}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000201c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x18d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x44, 0x18, 0x1, 0xfffffffc, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) getcwd(0x0, 0x0) 2.039119204s ago: executing program 5 (id=5713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) read(r2, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 1.958902255s ago: executing program 5 (id=5714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x101}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) io_setup(0x2004, &(0x7f0000000680)) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x71, r6}) ioctl(r7, 0x8916, &(0x7f0000000000)) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) 1.825497506s ago: executing program 8 (id=5715): socket(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x6}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000201c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x18d, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x44, 0x18, 0x1, 0xfffffffc, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) getcwd(0x0, 0x0) 1.53396535s ago: executing program 8 (id=5718): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) 1.48742043s ago: executing program 8 (id=5719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1426ce1c3830e17c0000000000000000a4e95805bebf5c38a8d576bbb12f3181a8e95118b1e76af0ab19b014b4d5a8d231ba1ad83817402fc832a5105c8f0501931822e6307afed7e247360cc928f86dc0d28d31a7c71ed56bed489e4459cd7a26510928adc79cff1f612bd214f674cd24de1ef332e3d0a88eb58d75adc822e382b2e89b2c2247cce78e952344642dee7ffe8d87553a3f3fd70a"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010004b042cbd7000fddbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a00010013"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000b03ef979fabcbd3363b100000000b7040000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={r8, 0x1, r6, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 1.232010994s ago: executing program 6 (id=5726): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setresgid(0xee00, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x5e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x1f00, {0x0, 0x0, 0x74, r3, {0xd, 0xfff2}, {}, {0xe, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 1.175675634s ago: executing program 4 (id=5729): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) 1.143633995s ago: executing program 4 (id=5730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2], 0x1c}}, 0x20008040) 1.123395815s ago: executing program 4 (id=5731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) io_setup(0x2004, &(0x7f0000000680)) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x71, r5}) ioctl(r6, 0x8916, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) 1.057083706s ago: executing program 5 (id=5733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) 1.037077916s ago: executing program 5 (id=5734): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r6 = eventfd2(0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x18) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) 939.085657ms ago: executing program 5 (id=5738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1426ce1c3830e17c0000000000000000a4e95805bebf5c38a8d576bbb12f3181a8e95118b1e76af0ab19b014b4d5a8d231ba1ad83817402fc832a5105c8f0501931822e6307afed7e247360cc928f86dc0d28d31a7c71ed56bed489e4459cd7a26510928adc79cff1f612bd214f674cd24de1ef332e3d0a88eb58d75adc822e382b2e89b2c2247cce78e952344642dee7ffe8d87553a3f3fd70a"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010004b042cbd7000fddbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a00010013"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000b03ef979fabcbd3363b100000000b7040000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={r8, 0x1, r6, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000280)={r8, 0x0, 0x5}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) 618.953822ms ago: executing program 9 (id=5744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb0500040005"], 0x58}, 0x1, 0x0, 0x0, 0x200040d1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x6, 0x2c, 0x81, 0x0, 0xc7, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0xc1, 0x0, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x9c, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000010000108000000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000a40867e13ef554766babe947d2d38f841ea28152c812939cc5541d9791d319c4a6ef562b59fa072cbba317e464ff55fcb3cb080366ba8b2f1397671dde38a76c87acd41a64331cd7b9"], 0x30}}, 0x0) 594.463822ms ago: executing program 9 (id=5745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) 574.324232ms ago: executing program 9 (id=5747): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000480)={0x1d, r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r4, 0x0, 0x8000000000}, 0x18) close(r2) 553.575223ms ago: executing program 9 (id=5748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) read(r2, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 483.552894ms ago: executing program 9 (id=5749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 447.269814ms ago: executing program 9 (id=5750): syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r3 = msgget$private(0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000b80)=""/219, 0x2000, 0x800, 0x4}, 0x20) msgrcv(r3, 0x0, 0x4d, 0x3, 0x1400) msgrcv(r3, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000200)='mm_page_alloc\x00', r6}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xffffff80, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="fbdbdf254523439ab209d18d71ea451df7b900000c0006000100000001000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x8008004) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000d00)=@bloom_filter={0x1e, 0x4, 0x0, 0x401, 0x0, r7, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x6, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='task_newtask\x00'}, 0x18) 315.098326ms ago: executing program 6 (id=5751): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0x440c4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x11, 0x2, {{0x3ff, 0x3ff, 0x1, 0x0, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7f, @mcast2, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="d2", 0x1}], 0x1, &(0x7f0000000c00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xed9}}, @tclass={{0x14, 0x29, 0x43, 0x60}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r9}}}, @rthdrdstopts={{0x160, 0x29, 0x37, {0x6c, 0x28, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @pad1, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x21, [0x80000001, 0x0, 0x8000000000000000, 0x187, 0x1, 0x80000001]}}, @pad1, @generic={0x6, 0xe4, "4c14c5d3dc8235d6e54ea1da51749104b3a874b02b77ec4e71fd43b9e97a61a8e33afaae8cccd48107dc957e5581d2bae5c33e1d9b9c4439433170e7771924375dbb90503a8ec5e8c1ae5d6b70874f183168c1d8bf3e8df7a939a3bac1f317b508dbe78a08c819c9bd4a2e6d5089e7faa49748867f5ead720a5806fd940bb7c375198296e7606812d463e3f34d7c6452c3f783f094e10d851c16b918b634c8bdb35c9769c57cfac0e10b722eef989e74dcfdb4b0c8b37215bae5f2f57ff44134649bd87588fc155243d333f66eb363aaaeae7ebe696171968da280256915e46115d573c2"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x67}}}, @hopopts={{0xc0, 0x29, 0x36, {0x5c, 0x14, '\x00', [@generic={0x4, 0x96, "aaf9d3df1927194edd19a8a44a2ce8be49ae3561336965a5c78437b939a828fe175cf781a2c9a5deafe1eec7ea3cb589ec0bee8db56263235e48eabafef197f36052187dc5be5ad253af4ccc39fbe25cd76245528411b41a8d7878e7f5821c3f9d865475679794b243eca4d9e3365055eef7f7f2a702e22ae060ee06aafd1782dc5ff67907c52c41e8b092fcd085ed1ff2257affd8f3"}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0x74, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}], 0x368}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000280)="02f88faef3da604dae177874325379ccd83b1b4f73166e9654e32295b2398ccaaa97eff5cbb34507eff286ef8281d2bd28137cacb81ac01fb1b9", 0x3a}, {&(0x7f00000002c0)="b2a57a375cb898e0a6282b17b94ebb59e9f1df20892d94ae81eab7dbcae9cacd98dadf2e709c3622d4b9e79a692e52ca5c8787d0e7123680ed53e605b086a68e5445df348fe8a583bf7b83ea0676df44887db7fd461b7d91164cfe6f7358970a15f5bd4ada8375b48e9edc88f7eef00c89413bf2f6f6d6f5", 0x78}, {&(0x7f0000000340)="3d2623b5311f9e196b949ca0f9ae1a2a12ed58b542007440d3d6afb0fc34fa92ff1ba810de8995fef8d5034791f88e989932d3a6047e382a7ae75db0e85d167db3209af8cb8440ecfa2b394768dfe1e621ecf112480dd79016ffad3f77a64c7508930a6df42694ae30741390d7702bc0d927171804669c37795916ad5f2d24dc949173ac58986533d3fe863f66a862dff16d1bd3f3fb31b5f5006423985b82ddae487ea96bf783878a1a5d0caed59b3995f5738d14f981", 0xb7}, {&(0x7f0000000580)="a6fe6a8b395faf1ea0e88c7384869e2cdf94d949923295e79e4d91ca09cecb3f7e765ae6239ee232f131de35207017505e984250711f521fbf25d105f85295ad20d5fac643b9690170d6e68fa681d8794b6b3d8d4a5cfa29cbfd99686ff407628b8f47fc90440b73db5e604017f71d32cd29b8c1603c7bb0ada5e16376b4f01d4f032084bfd82a1eced598263ec65f781cd4cda7f103fcad8fc6802fe7f9a2101c1f48c834831069de689f8f3b16f7407c838c969c0f171bdd884b2fa9512fe11dacb65e35f9b08cde18ecdc1d8b1139ac93b657c32ebd75a7c32588df", 0xdd}, {&(0x7f0000000900)="a0e9268ce9435ed5c6900b0f3534ad84af57fdf8a931f426bcb0fce5c45cc3a569d0221c6bef1cb88a26c7a1c32b3017d272b2af922952360d236a5e31ad991ad997af996944eb795016ff3644412b83d75f1c83113b5731ee4b1acf1540fa45e50d1a2d074ce93ce98dbeabe527c331e342a9b3aede2298543b326d167669ebb0cb599173500c80d05951de47a384ef080f4fc2807b4b815220e6ddf7153d38af5e4005c0d0afd448b8bbd621c18e7493", 0xb1}], 0x5, &(0x7f0000001180)=[@dstopts_2292={{0x178, 0x29, 0x4, {0x8a, 0x2c, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x3, 0xcd, "62f34771681f216813cf0eeca6f178b787299c2ac02bbc11e12ea2263229afa444f7ce2c8432e296250798736eea94f1ccd4764e576e73486574da600ef808c807720b2f50e80f9ee29f4c345ac426fe4a6db1c4ff94b1d79194f4d0d73641404edd451733d08e8c63d93d8447c5329fd78b27bbc5e366bbd09204ab2059404012795bb1074c431131eb3a418fa66fba9f60bf83d6da5a439d579f5a575294e3b6669d415dcafd863f440d056a304dcee3125dfcc381e0aeb6f3b4a348808915ebc40838abce61235bac12e203"}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x2, 0x14, 0x8, 0xe, [0x0, 0x7, 0x7fff, 0xffffffffffffa5e7, 0x4, 0x4, 0x5, 0x7, 0x4, 0x7]}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @dstopts={{0x28, 0x29, 0x37, {0x84, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x1, 0x6, 0x0, [@private0]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x3c, 0x15, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x3, 0x9, [0x8, 0x460000000000000, 0x200, 0x87]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @generic={0x9, 0x4c, "0980cc2a55d83078985853476599bef0e7a46763d055e53f87d63f07f91a45c42775b04fa58355cb84919f4a6a7525d8dce3fd600d64930ae6eb3fe0638dcf7ce02f227e2fb08188c1cd9768"}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @ra={0x5, 0x2, 0x81}]}}}], 0x2c0}}], 0x2, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r5}, 0x18) r10 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r10, 0x8929, &(0x7f0000000080)={'wg1\x00', @ifru_settings={0x0, 0x5dd4, @cisco=0x0}}) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r11) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x28, r12, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x7}, @val={0xc}}}}, 0x28}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 258.683996ms ago: executing program 6 (id=5752): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x3, 0x8, 0xc, 0x200, &(0x7f0000000880)="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"}) 189.270257ms ago: executing program 4 (id=5753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32=r2], 0x1c}}, 0x20008040) 124.387388ms ago: executing program 4 (id=5754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) 59.377829ms ago: executing program 6 (id=5755): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$qrtrtun(r0, &(0x7f0000000540)="0b8393", 0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") 14.96418ms ago: executing program 4 (id=5756): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x133f, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x3e74, &(0x7f00000002c0)={0x0, 0xb4b6, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=5757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1426ce1c3830e17c0000000000000000a4e95805bebf5c38a8d576bbb12f3181a8e95118b1e76af0ab19b014b4d5a8d231ba1ad83817402fc832a5105c8f0501931822e6307afed7e247360cc928f86dc0d28d31a7c71ed56bed489e4459cd7a26510928adc79cff1f612bd214f674cd24de1ef332e3d0a88eb58d75adc822e382b2e89b2c2247cce78e952344642dee7ffe8d87553a3f3fd70a"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010004b042cbd7000fddbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a00010013"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="00000000b03ef979fabcbd3363b100000000b7040000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000080)={r7, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={r8, 0x1, r6, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): 230040][T19278] ? ksys_write+0x16e/0x1a0 [ 302.230066][T19278] __x64_sys_newlstat+0x31/0x40 [ 302.230096][T19278] x64_sys_call+0x1c47/0x2fb0 [ 302.230116][T19278] do_syscall_64+0xd0/0x1a0 [ 302.230165][T19278] ? clear_bhb_loop+0x25/0x80 [ 302.230193][T19278] ? clear_bhb_loop+0x25/0x80 [ 302.230220][T19278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.230242][T19278] RIP: 0033:0x7f2b10a2e969 [ 302.230256][T19278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.230295][T19278] RSP: 002b:00007f2b0f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 302.230315][T19278] RAX: ffffffffffffffda RBX: 00007f2b10c55fa0 RCX: 00007f2b10a2e969 [ 302.230331][T19278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002240 [ 302.230346][T19278] RBP: 00007f2b0f097090 R08: 0000000000000000 R09: 0000000000000000 [ 302.230362][T19278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.230374][T19278] R13: 0000000000000000 R14: 00007f2b10c55fa0 R15: 00007ffedffda3b8 [ 302.230393][T19278] [ 302.626346][T19293] loop9: detected capacity change from 0 to 2048 [ 302.638488][T19296] loop5: detected capacity change from 0 to 2048 [ 302.681230][T19296] Alternate GPT is invalid, using primary GPT. [ 302.687604][T19296] loop5: p1 p2 p3 [ 302.694326][T19301] loop8: detected capacity change from 0 to 512 [ 302.720325][T19293] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.736903][T19293] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1764 with error 28 [ 302.749381][T19293] EXT4-fs (loop9): This should not happen!! Data will be lost [ 302.749381][T19293] [ 302.759143][T19293] EXT4-fs (loop9): Total free blocks count 0 [ 302.765193][T19293] EXT4-fs (loop9): Free/Dirty block details [ 302.771134][T19293] EXT4-fs (loop9): free_blocks=2415919104 [ 302.776885][T19293] EXT4-fs (loop9): dirty_blocks=1776 [ 302.782249][T19293] EXT4-fs (loop9): Block reservation details [ 302.788304][T19293] EXT4-fs (loop9): i_reserved_data_blocks=111 [ 302.797865][T19305] EXT4-fs (loop9): shut down requested (0) [ 302.820941][ T7342] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 302.849612][T19307] xt_hashlimit: max too large, truncated to 1048576 [ 302.856862][T19307] xt_limit: Overflow, try lower: 0/0 [ 303.097469][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 303.097512][ T29] audit: type=1400 audit(1745923844.729:8030): avc: denied { read } for pid=19317 comm="syz.9.5156" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 303.129215][ T29] audit: type=1400 audit(1745923844.769:8031): avc: denied { map_create } for pid=19317 comm="syz.9.5156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 303.169493][ T29] audit: type=1400 audit(1745923844.769:8032): avc: denied { prog_load } for pid=19317 comm="syz.9.5156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 303.188735][ T29] audit: type=1400 audit(1745923844.769:8033): avc: denied { bpf } for pid=19317 comm="syz.9.5156" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.209816][ T29] audit: type=1400 audit(1745923844.769:8034): avc: denied { perfmon } for pid=19317 comm="syz.9.5156" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.230786][ T29] audit: type=1400 audit(1745923844.769:8035): avc: denied { prog_run } for pid=19317 comm="syz.9.5156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 303.249939][ T29] audit: type=1400 audit(1745923844.789:8036): avc: denied { validate_trans } for pid=19317 comm="syz.9.5156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 303.274344][ T29] audit: type=1400 audit(1745923844.799:8037): avc: denied { read write } for pid=12961 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.298741][ T29] audit: type=1400 audit(1745923844.799:8038): avc: denied { open } for pid=12961 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.322987][ T29] audit: type=1400 audit(1745923844.799:8039): avc: denied { ioctl } for pid=12961 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.352170][T19322] __nla_validate_parse: 5 callbacks suppressed [ 303.352187][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5158'. [ 303.389568][T19324] loop9: detected capacity change from 0 to 512 [ 303.585379][T19336] loop8: detected capacity change from 0 to 2048 [ 303.651193][T19336] Alternate GPT is invalid, using primary GPT. [ 303.657549][T19336] loop8: p1 p2 p3 [ 303.753514][T19340] netlink: 'syz.4.5164': attribute type 3 has an invalid length. [ 303.781590][T19342] netlink: 'syz.4.5165': attribute type 3 has an invalid length. [ 303.800294][T19343] xt_hashlimit: max too large, truncated to 1048576 [ 303.807649][T19343] xt_limit: Overflow, try lower: 0/0 [ 303.877269][T19349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5168'. [ 304.017423][T19351] loop4: detected capacity change from 0 to 8192 [ 304.046609][T19351] netlink: 'syz.4.5169': attribute type 13 has an invalid length. [ 304.160250][T19356] loop9: detected capacity change from 0 to 256 [ 304.288272][T19351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.452127][T19366] netlink: 'syz.8.5175': attribute type 3 has an invalid length. [ 304.462763][T19368] tipc: Started in network mode [ 304.467678][T19368] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 304.477845][T19368] tipc: Enabled bearer , priority 10 [ 304.525692][T19373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5179'. [ 304.621073][T19380] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 304.627630][T19380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.635101][T19380] vhci_hcd vhci_hcd.0: Device attached [ 304.670700][T19385] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 304.677334][T19385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.684934][T19385] vhci_hcd vhci_hcd.0: Device attached [ 304.711389][T19380] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.729674][T19380] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 304.730190][T19393] 9pnet_fd: Insufficient options for proto=fd [ 304.736321][T19380] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.736389][T19380] vhci_hcd vhci_hcd.0: Device attached [ 304.762108][T19380] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 304.768819][T19380] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.768891][T19380] vhci_hcd vhci_hcd.0: Device attached [ 304.791055][T19380] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.791340][T19380] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.791641][T19380] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.812346][T19380] vhci_hcd vhci_hcd.0: port 0 already used [ 304.816557][T19390] vhci_hcd: connection closed [ 304.816683][T19386] vhci_hcd: connection closed [ 304.816717][T19382] vhci_hcd: connection closed [ 304.816788][T19394] vhci_hcd: connection closed [ 304.817052][ T7174] vhci_hcd: stop threads [ 304.817064][ T7174] vhci_hcd: release socket [ 304.817075][ T7174] vhci_hcd: disconnect device [ 304.817169][ T7174] vhci_hcd: stop threads [ 304.817175][ T7174] vhci_hcd: release socket [ 304.817184][ T7174] vhci_hcd: disconnect device [ 304.817297][ T7174] vhci_hcd: stop threads [ 304.817303][ T7174] vhci_hcd: release socket [ 304.817315][ T7174] vhci_hcd: disconnect device [ 304.817453][ T7174] vhci_hcd: stop threads [ 304.817461][ T7174] vhci_hcd: release socket [ 304.817472][ T7174] vhci_hcd: disconnect device [ 304.830610][ T23] vhci_hcd: vhci_device speed not set [ 304.862519][T19401] FAULT_INJECTION: forcing a failure. [ 304.862519][T19401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.862553][T19401] CPU: 0 UID: 0 PID: 19401 Comm: syz.9.5185 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 304.862645][T19401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.862660][T19401] Call Trace: [ 304.862668][T19401] [ 304.862675][T19401] __dump_stack+0x1d/0x30 [ 304.862701][T19401] dump_stack_lvl+0xe8/0x140 [ 304.862800][T19401] dump_stack+0x15/0x1b [ 304.862823][T19401] should_fail_ex+0x265/0x280 [ 304.862903][T19401] should_fail_alloc_page+0xf2/0x100 [ 304.862951][T19401] __alloc_frozen_pages_noprof+0xff/0x360 [ 304.862989][T19401] alloc_pages_mpol+0xb3/0x250 [ 304.863018][T19401] alloc_pages_noprof+0x90/0x130 [ 304.863082][T19401] __pmd_alloc+0x47/0x440 [ 304.863120][T19401] handle_mm_fault+0x1b31/0x2ae0 [ 304.863155][T19401] ? __rcu_read_unlock+0x4f/0x70 [ 304.863193][T19401] do_user_addr_fault+0x3fe/0x1090 [ 304.863269][T19401] exc_page_fault+0x54/0xc0 [ 304.863304][T19401] asm_exc_page_fault+0x26/0x30 [ 304.863345][T19401] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 304.863383][T19401] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 304.863476][T19401] RSP: 0018:ffffc9000a4c7df0 EFLAGS: 00050216 [ 304.863495][T19401] RAX: 0000000000000003 RBX: 0000000000000020 RCX: 0000000000000020 [ 304.863512][T19401] RDX: 0000000000000000 RSI: ffffc9000a4c7e28 RDI: 0000200000000100 [ 304.863528][T19401] RBP: 0000000000000002 R08: 000000000000049d R09: 0000000000000000 [ 304.863617][T19401] R10: 0001c9000a4c7e28 R11: 0001c9000a4c7e47 R12: 0000200000000120 [ 304.863633][T19401] R13: 00007ffffffff000 R14: 0000200000000100 R15: ffffc9000a4c7e28 [ 304.863657][T19401] _copy_to_user+0x7c/0xa0 [ 304.863692][T19401] __se_sys_msgctl+0x1e7/0x290 [ 304.863755][T19401] __x64_sys_msgctl+0x43/0x50 [ 304.863840][T19401] x64_sys_call+0x28e9/0x2fb0 [ 304.863867][T19401] do_syscall_64+0xd0/0x1a0 [ 304.863894][T19401] ? clear_bhb_loop+0x25/0x80 [ 304.863921][T19401] ? clear_bhb_loop+0x25/0x80 [ 304.864014][T19401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.864055][T19401] RIP: 0033:0x7f2b10a2e969 [ 304.864073][T19401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.864095][T19401] RSP: 002b:00007f2b0f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 304.864196][T19401] RAX: ffffffffffffffda RBX: 00007f2b10c55fa0 RCX: 00007f2b10a2e969 [ 304.864212][T19401] RDX: 0000200000000100 RSI: 000000000000000c RDI: 0000000000000000 [ 304.864286][T19401] RBP: 00007f2b0f097090 R08: 0000000000000000 R09: 0000000000000000 [ 304.864302][T19401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.864318][T19401] R13: 0000000000000001 R14: 00007f2b10c55fa0 R15: 00007ffedffda3b8 [ 304.864341][T19401] [ 304.880556][T19399] lo speed is unknown, defaulting to 1000 [ 305.480711][ T1040] tipc: Node number set to 4269801488 [ 305.526082][T19410] netlink: 'syz.5.5189': attribute type 3 has an invalid length. [ 305.619846][T19420] loop5: detected capacity change from 0 to 2048 [ 305.729173][T19420] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 305.746250][T19420] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1978 with error 28 [ 305.758817][T19420] EXT4-fs (loop5): This should not happen!! Data will be lost [ 305.758817][T19420] [ 305.768517][T19420] EXT4-fs (loop5): Total free blocks count 0 [ 305.774526][T19420] EXT4-fs (loop5): Free/Dirty block details [ 305.780547][T19420] EXT4-fs (loop5): free_blocks=2415919104 [ 305.786301][T19420] EXT4-fs (loop5): dirty_blocks=1984 [ 305.791671][T19420] EXT4-fs (loop5): Block reservation details [ 305.797656][T19420] EXT4-fs (loop5): i_reserved_data_blocks=124 [ 305.806690][T19429] EXT4-fs (loop5): shut down requested (0) [ 305.825034][ T7342] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 305.928099][T19433] loop9: detected capacity change from 0 to 2048 [ 305.957942][T19431] loop5: detected capacity change from 0 to 1764 [ 305.991288][T19433] Alternate GPT is invalid, using primary GPT. [ 305.997722][T19433] loop9: p1 p2 p3 [ 306.036439][T19436] loop5: detected capacity change from 0 to 1764 [ 306.118665][T19444] xt_hashlimit: max too large, truncated to 1048576 [ 306.127289][T19444] xt_limit: Overflow, try lower: 0/0 [ 306.140918][T19446] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5200'. [ 306.180424][T19448] netlink: 'syz.5.5201': attribute type 3 has an invalid length. [ 306.208686][T19450] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 306.215260][T19450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.222776][T19450] vhci_hcd vhci_hcd.0: Device attached [ 306.230489][T19450] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 306.237104][T19450] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.244740][T19450] vhci_hcd vhci_hcd.0: Device attached [ 306.252924][T19450] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 306.259559][T19450] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 306.267212][T19450] vhci_hcd vhci_hcd.0: Device attached [ 306.274851][T19450] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 306.281479][T19450] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.289086][T19450] vhci_hcd vhci_hcd.0: Device attached [ 306.296282][T19450] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 306.302968][T19450] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.310625][T19450] vhci_hcd vhci_hcd.0: Device attached [ 306.319089][T19450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.327580][T19450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.337240][T19450] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.362343][T19450] vhci_hcd vhci_hcd.0: port 0 already used [ 306.388676][T19459] vhci_hcd: connection closed [ 306.388908][ T7342] vhci_hcd: stop threads [ 306.397999][ T7342] vhci_hcd: release socket [ 306.402542][ T7342] vhci_hcd: disconnect device [ 306.407451][T13250] vhci_hcd: vhci_device speed not set [ 306.415006][T19457] vhci_hcd: connection closed [ 306.415399][ T7342] vhci_hcd: stop threads [ 306.424429][ T7342] vhci_hcd: release socket [ 306.428883][ T7342] vhci_hcd: disconnect device [ 306.434661][T19451] vhci_hcd: connection closed [ 306.434926][ T7342] vhci_hcd: stop threads [ 306.435440][T19453] vhci_hcd: connection closed [ 306.439678][ T7342] vhci_hcd: release socket [ 306.439747][ T7342] vhci_hcd: disconnect device [ 306.444337][T19455] vhci_hcd: connection closed [ 306.460590][ T7342] vhci_hcd: stop threads [ 306.469525][ T7342] vhci_hcd: release socket [ 306.474050][ T7342] vhci_hcd: disconnect device [ 306.478772][T13250] usb 11-1: new full-speed USB device number 4 using vhci_hcd [ 306.486558][T13250] usb 11-1: enqueue for inactive port 0 [ 306.492576][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5204'. [ 306.501659][T13250] usb 11-1: enqueue for inactive port 0 [ 306.507230][T13250] usb 11-1: enqueue for inactive port 0 [ 306.513050][ T7342] vhci_hcd: stop threads [ 306.517415][ T7342] vhci_hcd: release socket [ 306.521922][ T7342] vhci_hcd: disconnect device [ 306.557224][T19470] IPv6: Can't replace route, no match found [ 306.600544][T13250] vhci_hcd: vhci_device speed not set [ 306.616960][T19472] x_tables: duplicate underflow at hook 1 [ 306.699809][T19481] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5211'. [ 306.731223][T19487] netlink: 'syz.8.5212': attribute type 3 has an invalid length. [ 306.815393][T19498] loop8: detected capacity change from 0 to 2048 [ 306.861195][T19498] Alternate GPT is invalid, using primary GPT. [ 306.867483][T19498] loop8: p1 p2 p3 [ 306.970439][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5217'. [ 306.994863][T19503] xt_hashlimit: max too large, truncated to 1048576 [ 307.004955][T19503] xt_limit: Overflow, try lower: 0/0 [ 307.050031][T19507] FAULT_INJECTION: forcing a failure. [ 307.050031][T19507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.063201][T19507] CPU: 1 UID: 0 PID: 19507 Comm: syz.5.5219 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 307.063229][T19507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.063286][T19507] Call Trace: [ 307.063292][T19507] [ 307.063302][T19507] __dump_stack+0x1d/0x30 [ 307.063333][T19507] dump_stack_lvl+0xe8/0x140 [ 307.063351][T19507] dump_stack+0x15/0x1b [ 307.063437][T19507] should_fail_ex+0x265/0x280 [ 307.063473][T19507] should_fail+0xb/0x20 [ 307.063499][T19507] should_fail_usercopy+0x1a/0x20 [ 307.063526][T19507] _copy_from_user+0x1c/0xb0 [ 307.063603][T19507] ___sys_sendmsg+0xc1/0x1d0 [ 307.063643][T19507] __x64_sys_sendmsg+0xd4/0x160 [ 307.063672][T19507] x64_sys_call+0x2999/0x2fb0 [ 307.063695][T19507] do_syscall_64+0xd0/0x1a0 [ 307.063785][T19507] ? clear_bhb_loop+0x25/0x80 [ 307.063808][T19507] ? clear_bhb_loop+0x25/0x80 [ 307.063830][T19507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.063925][T19507] RIP: 0033:0x7ffb1543e969 [ 307.063957][T19507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.063979][T19507] RSP: 002b:00007ffb13aa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.064030][T19507] RAX: ffffffffffffffda RBX: 00007ffb15665fa0 RCX: 00007ffb1543e969 [ 307.064042][T19507] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 307.064054][T19507] RBP: 00007ffb13aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.064065][T19507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.064119][T19507] R13: 0000000000000000 R14: 00007ffb15665fa0 R15: 00007ffe9bcdacc8 [ 307.064142][T19507] [ 307.684003][T19515] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5222'. [ 307.719823][T19519] netlink: 'syz.9.5224': attribute type 3 has an invalid length. [ 307.770135][T19525] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 307.776779][T19525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 307.784448][T19525] vhci_hcd vhci_hcd.0: Device attached [ 307.799256][T19525] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 307.805908][T19525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.813543][T19525] vhci_hcd vhci_hcd.0: Device attached [ 307.821412][T19525] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(13) [ 307.828126][T19525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 307.835578][T19525] vhci_hcd vhci_hcd.0: Device attached [ 307.843070][T19531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5228'. [ 307.868588][T19525] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(15) [ 307.875222][T19525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 307.879631][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5229'. [ 307.882862][T19525] vhci_hcd vhci_hcd.0: Device attached [ 307.924915][T19525] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(17) [ 307.931553][T19525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 307.939251][T19525] vhci_hcd vhci_hcd.0: Device attached [ 307.952353][T19525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 307.953328][T19542] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.962305][T19525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 307.980266][T19525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 307.988518][T13209] vhci_hcd: vhci_device speed not set [ 307.996365][T19525] vhci_hcd vhci_hcd.0: port 0 already used [ 308.005782][T19541] vhci_hcd: connection closed [ 308.006023][T19535] vhci_hcd: connection closed [ 308.010897][ T7174] vhci_hcd: stop threads [ 308.019860][ T7174] vhci_hcd: release socket [ 308.024351][ T7174] vhci_hcd: disconnect device [ 308.030881][T19532] vhci_hcd: connection closed [ 308.030997][T19529] vhci_hcd: connection closed [ 308.031234][T19526] vhci_hcd: connection closed [ 308.041848][T19542] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.050575][T13209] usb 17-1: new full-speed USB device number 6 using vhci_hcd [ 308.064098][ T7174] vhci_hcd: stop threads [ 308.068379][ T7174] vhci_hcd: release socket [ 308.072848][ T7174] vhci_hcd: disconnect device [ 308.077923][T19527] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 308.078821][ T7174] vhci_hcd: stop threads [ 308.088144][ T7174] vhci_hcd: release socket [ 308.092642][ T7174] vhci_hcd: disconnect device [ 308.097696][ T7174] vhci_hcd: stop threads [ 308.101985][ T7174] vhci_hcd: release socket [ 308.106416][ T7174] vhci_hcd: disconnect device [ 308.111345][ T7174] vhci_hcd: stop threads [ 308.115615][ T7174] vhci_hcd: release socket [ 308.120046][ T7174] vhci_hcd: disconnect device [ 308.121626][T19542] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.192361][T19542] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.247386][T19542] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.249063][T19548] loop5: detected capacity change from 0 to 2048 [ 308.265122][T19542] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.276852][T19542] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.288595][T19542] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.314578][T19548] Alternate GPT is invalid, using primary GPT. [ 308.320904][T19548] loop5: p1 p2 p3 [ 308.444291][T19555] xt_hashlimit: max too large, truncated to 1048576 [ 308.451840][T19555] xt_limit: Overflow, try lower: 0/0 [ 308.522023][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 308.522040][ T29] audit: type=1400 audit(1745923850.159:8216): avc: denied { setopt } for pid=19556 comm="syz.4.5235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.560542][ T29] audit: type=1400 audit(1745923850.189:8217): avc: denied { remount } for pid=19556 comm="syz.4.5235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 308.624984][T19562] netlink: 'syz.8.5237': attribute type 3 has an invalid length. [ 308.655683][T19566] __nla_validate_parse: 2 callbacks suppressed [ 308.655703][T19566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5239'. [ 308.687177][T19568] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 308.693731][T19568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 308.701403][T19568] vhci_hcd vhci_hcd.0: Device attached [ 308.712039][ T29] audit: type=1400 audit(1745923850.349:8218): avc: denied { write } for pid=19567 comm="syz.8.5240" name="event2" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.735730][ T29] audit: type=1400 audit(1745923850.349:8219): avc: denied { open } for pid=19567 comm="syz.8.5240" path="/dev/input/event2" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.759943][ T29] audit: type=1400 audit(1745923850.349:8220): avc: denied { ioctl } for pid=19567 comm="syz.8.5240" path="/dev/input/event2" dev="devtmpfs" ino=246 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.786126][ T29] audit: type=1400 audit(1745923850.369:8221): avc: denied { read } for pid=19567 comm="syz.8.5240" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 308.809375][ T29] audit: type=1400 audit(1745923850.369:8222): avc: denied { open } for pid=19567 comm="syz.8.5240" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 308.833223][ T29] audit: type=1400 audit(1745923850.379:8223): avc: denied { ioctl } for pid=19567 comm="syz.8.5240" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 308.850559][T19569] vhci_hcd: connection closed [ 308.881562][ T139] vhci_hcd: stop threads [ 308.890625][ T139] vhci_hcd: release socket [ 308.895112][ T139] vhci_hcd: disconnect device [ 308.911762][ T29] audit: type=1400 audit(1745923850.549:8224): avc: denied { mount } for pid=19575 comm="syz.4.5242" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 308.934052][ T29] audit: type=1400 audit(1745923850.549:8225): avc: denied { remount } for pid=19575 comm="syz.4.5242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 309.130447][T19581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5244'. [ 309.270157][T19586] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 309.276772][T19586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.284259][T19586] vhci_hcd vhci_hcd.0: Device attached [ 309.290798][T19586] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(11) [ 309.297416][T19586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.304989][T19586] vhci_hcd vhci_hcd.0: Device attached [ 309.323082][T19586] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(13) [ 309.329706][T19586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.337194][T19586] vhci_hcd vhci_hcd.0: Device attached [ 309.354962][T19586] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(15) [ 309.361620][T19586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 309.369323][T19586] vhci_hcd vhci_hcd.0: Device attached [ 309.393829][T19586] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(17) [ 309.400112][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5248'. [ 309.400563][T19586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 309.400649][T19586] vhci_hcd vhci_hcd.0: Device attached [ 309.409479][T19600] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5248'. [ 309.452368][T19601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 309.460715][T13250] vhci_hcd: vhci_device speed not set [ 309.471284][T19601] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 309.490729][T19586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 309.500287][T19605] netlink: 'syz.4.5250': attribute type 3 has an invalid length. [ 309.520601][T13250] usb 19-1: new full-speed USB device number 6 using vhci_hcd [ 309.528309][T19586] vhci_hcd vhci_hcd.0: port 0 already used [ 309.546247][T19598] vhci_hcd: connection closed [ 309.546385][T19594] vhci_hcd: connection closed [ 309.546436][ T139] vhci_hcd: stop threads [ 309.551277][T19589] vhci_hcd: connection closed [ 309.555793][ T139] vhci_hcd: release socket [ 309.569292][ T139] vhci_hcd: disconnect device [ 309.570556][T19587] vhci_hcd: connection reset by peer [ 309.576515][T19591] vhci_hcd: connection closed [ 309.596460][T19609] loop8: detected capacity change from 0 to 164 [ 309.601661][ T139] vhci_hcd: stop threads [ 309.611978][ T139] vhci_hcd: release socket [ 309.616416][ T139] vhci_hcd: disconnect device [ 309.636156][ T139] vhci_hcd: stop threads [ 309.640536][ T139] vhci_hcd: release socket [ 309.644980][ T139] vhci_hcd: disconnect device [ 309.650088][ T139] vhci_hcd: stop threads [ 309.654736][ T139] vhci_hcd: release socket [ 309.659259][ T139] vhci_hcd: disconnect device [ 309.664258][ T139] vhci_hcd: stop threads [ 309.668579][ T139] vhci_hcd: release socket [ 309.673075][ T139] vhci_hcd: disconnect device [ 309.710157][T19615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.726018][T19617] IPv6: Can't replace route, no match found [ 309.818541][T19622] FAULT_INJECTION: forcing a failure. [ 309.818541][T19622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.831674][T19622] CPU: 1 UID: 0 PID: 19622 Comm: syz.8.5255 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 309.831701][T19622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.831754][T19622] Call Trace: [ 309.831762][T19622] [ 309.831771][T19622] __dump_stack+0x1d/0x30 [ 309.831794][T19622] dump_stack_lvl+0xe8/0x140 [ 309.831814][T19622] dump_stack+0x15/0x1b [ 309.831835][T19622] should_fail_ex+0x265/0x280 [ 309.831895][T19622] should_fail+0xb/0x20 [ 309.831922][T19622] should_fail_usercopy+0x1a/0x20 [ 309.831939][T19622] _copy_from_user+0x1c/0xb0 [ 309.831966][T19622] ___sys_sendmsg+0xc1/0x1d0 [ 309.832024][T19622] __x64_sys_sendmsg+0xd4/0x160 [ 309.832051][T19622] x64_sys_call+0x2999/0x2fb0 [ 309.832074][T19622] do_syscall_64+0xd0/0x1a0 [ 309.832094][T19622] ? clear_bhb_loop+0x25/0x80 [ 309.832157][T19622] ? clear_bhb_loop+0x25/0x80 [ 309.832181][T19622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.832203][T19622] RIP: 0033:0x7fac9317e969 [ 309.832221][T19622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.832318][T19622] RSP: 002b:00007fac917e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.832348][T19622] RAX: ffffffffffffffda RBX: 00007fac933a5fa0 RCX: 00007fac9317e969 [ 309.832364][T19622] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 309.832376][T19622] RBP: 00007fac917e7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.832389][T19622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.832408][T19622] R13: 0000000000000000 R14: 00007fac933a5fa0 R15: 00007ffc60f9c318 [ 309.832428][T19622] [ 310.024820][T19627] loop8: detected capacity change from 0 to 2048 [ 310.061471][T19627] Alternate GPT is invalid, using primary GPT. [ 310.067803][T19627] loop8: p1 p2 p3 [ 310.117437][T19629] loop5: detected capacity change from 0 to 1024 [ 310.136790][T19629] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5258: Failed to acquire dquot type 0 [ 310.148770][T19629] EXT4-fs (loop5): 1 truncate cleaned up [ 310.160302][T19629] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 310.168395][T19629] smc: net device bond0 erased user defined pnetid SYZ2 [ 310.182573][T19633] xt_hashlimit: max too large, truncated to 1048576 [ 310.189993][T19633] xt_limit: Overflow, try lower: 0/0 [ 310.218210][T19635] FAULT_INJECTION: forcing a failure. [ 310.218210][T19635] name failslab, interval 1, probability 0, space 0, times 0 [ 310.230919][T19635] CPU: 0 UID: 0 PID: 19635 Comm: syz.5.5259 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 310.230945][T19635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.230981][T19635] Call Trace: [ 310.230989][T19635] [ 310.230998][T19635] __dump_stack+0x1d/0x30 [ 310.231024][T19635] dump_stack_lvl+0xe8/0x140 [ 310.231117][T19635] dump_stack+0x15/0x1b [ 310.231134][T19635] should_fail_ex+0x265/0x280 [ 310.231173][T19635] should_failslab+0x8c/0xb0 [ 310.231330][T19635] kmem_cache_alloc_noprof+0x50/0x310 [ 310.231365][T19635] ? audit_log_start+0x365/0x6c0 [ 310.231396][T19635] audit_log_start+0x365/0x6c0 [ 310.231551][T19635] audit_seccomp+0x48/0x100 [ 310.231579][T19635] ? __seccomp_filter+0x68c/0x10d0 [ 310.231643][T19635] __seccomp_filter+0x69d/0x10d0 [ 310.231670][T19635] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 310.231704][T19635] ? vfs_write+0x75e/0x8d0 [ 310.231740][T19635] __secure_computing+0x82/0x150 [ 310.231764][T19635] syscall_trace_enter+0xcf/0x1e0 [ 310.231786][T19635] do_syscall_64+0xaa/0x1a0 [ 310.231812][T19635] ? clear_bhb_loop+0x25/0x80 [ 310.231839][T19635] ? clear_bhb_loop+0x25/0x80 [ 310.231866][T19635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.231892][T19635] RIP: 0033:0x7ffb1543e969 [ 310.231909][T19635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.231976][T19635] RSP: 002b:00007ffb13aa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 310.231998][T19635] RAX: ffffffffffffffda RBX: 00007ffb15665fa0 RCX: 00007ffb1543e969 [ 310.232013][T19635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 310.232025][T19635] RBP: 00007ffb13aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 310.232036][T19635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.232048][T19635] R13: 0000000000000000 R14: 00007ffb15665fa0 R15: 00007ffe9bcdacc8 [ 310.232120][T19635] [ 310.517729][T19641] syz.5.5262: attempt to access beyond end of device [ 310.517729][T19641] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 310.568216][T19641] lo speed is unknown, defaulting to 1000 [ 310.796957][T19650] IPv6: Can't replace route, no match found [ 310.991843][T19663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5270'. [ 311.000897][T19663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5270'. [ 311.075064][T19669] loop5: detected capacity change from 0 to 164 [ 311.083805][T19669] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 311.256672][T19673] loop4: detected capacity change from 0 to 512 [ 311.286052][T19672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5274'. [ 311.294998][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5274'. [ 311.408079][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5274'. [ 311.648112][T19679] loop9: detected capacity change from 0 to 512 [ 311.677199][T19679] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5275: corrupted inode contents [ 311.701061][T19679] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #16: comm syz.9.5275: mark_inode_dirty error [ 311.722902][T19679] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5275: corrupted inode contents [ 311.759954][T19679] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.5275: mark_inode_dirty error [ 311.780829][T19679] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5275: corrupted inode contents [ 311.801795][T19679] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 311.815175][T19685] loop8: detected capacity change from 0 to 256 [ 311.824356][T19679] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5275: corrupted inode contents [ 311.857732][T19679] EXT4-fs error (device loop9): ext4_truncate:4255: inode #16: comm syz.9.5275: mark_inode_dirty error [ 311.891695][T19679] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 311.912913][T19686] lo speed is unknown, defaulting to 1000 [ 311.920022][T19679] EXT4-fs (loop9): 1 truncate cleaned up [ 311.980965][T19679] ext4 filesystem being mounted at /462/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.090808][ T139] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 312.267685][T19695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5279'. [ 312.335442][T19701] loop4: detected capacity change from 0 to 164 [ 312.356587][T19701] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 312.659509][T19721] loop8: detected capacity change from 0 to 512 [ 312.694793][T19720] loop9: detected capacity change from 0 to 512 [ 312.723882][T19721] EXT4-fs mount: 19 callbacks suppressed [ 312.723974][T19721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.776931][T19720] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5292: corrupted inode contents [ 312.880112][T19720] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #16: comm syz.9.5292: mark_inode_dirty error [ 312.959667][T19720] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5292: corrupted inode contents [ 312.984171][T19720] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.5292: mark_inode_dirty error [ 313.003086][T19720] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5292: corrupted inode contents [ 313.019703][T19730] IPv6: Can't replace route, no match found [ 313.027551][T19720] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 313.037849][T19720] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5292: corrupted inode contents [ 313.052225][T19720] EXT4-fs error (device loop9): ext4_truncate:4255: inode #16: comm syz.9.5292: mark_inode_dirty error [ 313.063672][T19720] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 313.074126][T19720] EXT4-fs (loop9): 1 truncate cleaned up [ 313.080719][T19720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.093767][ T139] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 313.105447][T19720] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.116331][T13209] usb 17-1: enqueue for inactive port 0 [ 313.126227][T13209] usb 17-1: enqueue for inactive port 0 [ 313.156396][T19733] lo speed is unknown, defaulting to 1000 [ 313.173436][T12961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.200736][T13209] vhci_hcd: vhci_device speed not set [ 313.328036][T19736] lo speed is unknown, defaulting to 1000 [ 313.386671][T12494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.418587][T19759] loop9: detected capacity change from 0 to 2048 [ 313.433643][T19735] netlink: 'syz.5.5296': attribute type 6 has an invalid length. [ 313.447837][T12849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.468225][ T7174] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.471154][T19759] Alternate GPT is invalid, using primary GPT. [ 313.484449][T19759] loop9: p1 p2 p3 [ 313.546013][ T7174] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.561890][T19767] netlink: 'syz.4.5308': attribute type 3 has an invalid length. [ 313.613408][ T7174] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.647933][T19736] chnl_net:caif_netlink_parms(): no params data found [ 313.683249][ T7174] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.731101][T19736] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.738208][T19736] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.749198][T19736] bridge_slave_0: entered allmulticast mode [ 313.757586][T19736] bridge_slave_0: entered promiscuous mode [ 313.766475][T19736] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.773823][T19736] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.781177][T19736] bridge_slave_1: entered allmulticast mode [ 313.787648][T19736] bridge_slave_1: entered promiscuous mode [ 313.802652][T19787] netlink: 'syz.8.5314': attribute type 3 has an invalid length. [ 313.830087][T19736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.882242][T19793] __nla_validate_parse: 6 callbacks suppressed [ 313.882263][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5316'. [ 313.923946][ T7174] gretap0 (unregistering): left promiscuous mode [ 313.944408][T19790] loop4: detected capacity change from 0 to 512 [ 313.972861][ T7174] bond0 (unregistering): Released all slaves [ 313.973002][T19790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 313.991876][T19790] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.994095][T19736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.029971][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 314.029990][ T29] audit: type=1400 audit(1745923855.659:8689): avc: denied { setopt } for pid=19789 comm="syz.4.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 314.057245][ T29] audit: type=1400 audit(1745923855.659:8690): avc: denied { setattr } for pid=19789 comm="syz.4.5315" path="/464/file1/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.076262][T19790] cgroup: Unknown subsys name 'subj_user' [ 314.081027][ T29] audit: type=1400 audit(1745923855.699:8691): avc: denied { mounton } for pid=19789 comm="syz.4.5315" path="/464/file1/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 314.100143][T19790] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.5315: corrupted inode contents [ 314.121679][T19790] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #19: comm syz.4.5315: mark_inode_dirty error [ 314.140558][T19790] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #19: comm syz.4.5315: corrupted inode contents [ 314.154492][ T7174] hsr_slave_0: left promiscuous mode [ 314.160242][ T29] audit: type=1400 audit(1745923855.789:8692): avc: denied { create } for pid=19799 comm="syz.8.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.160846][ T7174] hsr_slave_1: left promiscuous mode [ 314.182216][T19790] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.5315: mark_inode_dirty error [ 314.198381][T19790] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.5315: mark inode dirty (error -117) [ 314.198486][ T7174] dummy0: left promiscuous mode [ 314.198645][ T7174] veth1_macvtap: left promiscuous mode [ 314.198688][ T7174] veth0_macvtap: left promiscuous mode [ 314.198737][ T7174] veth1_vlan: left promiscuous mode [ 314.198803][ T7174] veth0_vlan: left promiscuous mode [ 314.199359][T19790] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 314.277451][ T29] audit: type=1400 audit(1745923855.909:8693): avc: denied { setopt } for pid=19799 comm="syz.8.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.300206][T19803] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5319'. [ 314.348470][T13542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 314.372185][T19807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5321'. [ 314.387172][T19736] team0: Port device team_slave_0 added [ 314.396609][T19736] team0: Port device team_slave_1 added [ 314.407217][T19805] netlink: 'syz.9.5320': attribute type 3 has an invalid length. [ 314.441127][T19809] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 314.447745][T19809] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.455288][T19809] vhci_hcd vhci_hcd.0: Device attached [ 314.462189][T19809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 314.475748][T19736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.482784][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.483086][T19814] loop9: detected capacity change from 0 to 164 [ 314.508707][T19736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.514370][T19811] lo speed is unknown, defaulting to 1000 [ 314.532057][T19736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.537942][T19818] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 314.539070][T19736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.545672][T19818] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 314.545750][T19818] vhci_hcd vhci_hcd.0: Device attached [ 314.571596][T19736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.597159][T13250] usb 19-1: enqueue for inactive port 0 [ 314.597339][T19814] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 314.602881][T13250] usb 19-1: enqueue for inactive port 0 [ 314.616220][T19809] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 314.622834][T19809] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 314.630315][T19809] vhci_hcd vhci_hcd.0: Device attached [ 314.638476][T19822] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 314.645148][T19822] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 314.652831][T19822] vhci_hcd vhci_hcd.0: Device attached [ 314.658873][ T23] vhci_hcd: vhci_device speed not set [ 314.670547][T13250] vhci_hcd: vhci_device speed not set [ 314.681212][T19809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 314.690007][T19809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 314.698914][T19809] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 314.717848][ T29] audit: type=1400 audit(1745923856.349:8694): avc: denied { write } for pid=19825 comm="syz.5.5325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 314.740524][ T23] usb 9-1: new full-speed USB device number 7 using vhci_hcd [ 314.745435][T19809] vhci_hcd vhci_hcd.0: port 0 already used [ 314.751087][T19831] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5326'. [ 314.758211][T19833] loop5: detected capacity change from 0 to 512 [ 314.773190][T19736] hsr_slave_0: entered promiscuous mode [ 314.779305][T19816] vhci_hcd: connection closed [ 314.779420][T19813] vhci_hcd: connection reset by peer [ 314.779530][T19819] vhci_hcd: connection closed [ 314.785815][ T139] vhci_hcd: stop threads [ 314.789536][T19823] vhci_hcd: connection closed [ 314.794241][ T139] vhci_hcd: release socket [ 314.801776][T19736] hsr_slave_1: entered promiscuous mode [ 314.803131][ T139] vhci_hcd: disconnect device [ 314.807820][T19736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.814851][ T139] vhci_hcd: stop threads [ 314.825378][T19736] Cannot create hsr debugfs directory [ 314.835220][ T139] vhci_hcd: release socket [ 314.835232][ T139] vhci_hcd: disconnect device [ 314.846304][ T139] vhci_hcd: stop threads [ 314.848045][T19833] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5327: corrupted inode contents [ 314.850656][ T139] vhci_hcd: release socket [ 314.850672][ T139] vhci_hcd: disconnect device [ 314.870245][T19833] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.5327: mark_inode_dirty error [ 314.875164][ T139] vhci_hcd: stop threads [ 314.884841][T19833] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5327: corrupted inode contents [ 314.887314][ T139] vhci_hcd: release socket [ 314.887336][ T139] vhci_hcd: disconnect device [ 314.899413][T19833] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.5327: mark_inode_dirty error [ 314.923860][T19833] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5327: corrupted inode contents [ 314.936144][T19833] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 314.936551][T19827] netlink: 'syz.8.5323': attribute type 6 has an invalid length. [ 314.945073][T19833] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5327: corrupted inode contents [ 314.966192][T19833] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.5327: mark_inode_dirty error [ 314.978744][T19833] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 314.988099][T19833] EXT4-fs (loop5): 1 truncate cleaned up [ 314.996377][T19833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.010708][ T7342] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 315.020473][ T7342] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 315.034784][T19833] ext4 filesystem being mounted at /456/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.076401][T19840] loop8: detected capacity change from 0 to 512 [ 315.083909][T19838] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5329'. [ 315.102438][T13149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.399813][T19736] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 315.408961][T19736] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.418802][T19736] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.428129][T19736] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 315.476680][T19736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.489225][T19736] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.501411][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.508607][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.527838][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.535067][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.543758][ T29] audit: type=1400 audit(1745923857.189:8695): avc: denied { egress } for pid=2969 comm="kworker/0:2" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 315.566294][ T29] audit: type=1400 audit(1745923857.189:8696): avc: denied { sendto } for pid=2969 comm="kworker/0:2" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 315.644107][T19736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.752708][T19736] veth0_vlan: entered promiscuous mode [ 315.760414][T19736] veth1_vlan: entered promiscuous mode [ 315.777797][T19736] veth0_macvtap: entered promiscuous mode [ 315.785985][T19736] veth1_macvtap: entered promiscuous mode [ 315.796705][T19736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.807717][T19736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.817406][T19736] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.826342][T19736] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.836135][T19736] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.845173][T19736] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.880534][ T29] audit: type=1400 audit(1745923857.509:8697): avc: denied { mounton } for pid=19736 comm="syz-executor" path="/root/syzkaller.apIWzb/syz-tmp" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 315.924626][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5297'. [ 315.933610][T19877] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5297'. [ 315.944551][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5297'. [ 315.984582][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5337'. [ 316.009989][T19883] lo speed is unknown, defaulting to 1000 [ 316.068168][T19886] netlink: 'syz.9.5339': attribute type 3 has an invalid length. [ 316.184389][T19883] netlink: 'syz.6.5338': attribute type 6 has an invalid length. [ 316.192244][T19883] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.251520][T19892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5341'. [ 316.279702][T19894] ip6tnl1: entered promiscuous mode [ 316.285152][T19894] ip6tnl1: entered allmulticast mode [ 316.338033][T19897] bridge_slave_0: left allmulticast mode [ 316.343817][T19897] bridge_slave_0: left promiscuous mode [ 316.349522][T19897] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.357955][T19897] bridge_slave_1: left allmulticast mode [ 316.363690][T19897] bridge_slave_1: left promiscuous mode [ 316.369431][T19897] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.379002][T19897] bond0: (slave bond_slave_0): Releasing backup interface [ 316.388389][T19897] bond0: (slave bond_slave_1): Releasing backup interface [ 316.399792][T19897] team0: Port device team_slave_0 removed [ 316.408354][T19897] team0: Port device team_slave_1 removed [ 316.415200][T19897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.422650][T19897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.430787][T19897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.438219][T19897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.548535][T19911] loop6: detected capacity change from 0 to 2048 [ 316.601606][T19911] Alternate GPT is invalid, using primary GPT. [ 316.608025][T19911] loop6: p1 p2 p3 [ 316.949964][T19921] netlink: 'syz.8.5360': attribute type 3 has an invalid length. [ 316.987021][T19923] lo speed is unknown, defaulting to 1000 [ 317.058883][T19927] loop9: detected capacity change from 0 to 2048 [ 317.102952][T19927] Alternate GPT is invalid, using primary GPT. [ 317.109476][T19927] loop9: p1 p2 p3 [ 317.172811][T19923] netlink: 'syz.8.5351': attribute type 6 has an invalid length. [ 317.242241][T19931] lo speed is unknown, defaulting to 1000 [ 317.319023][T19937] loop4: detected capacity change from 0 to 164 [ 317.328025][T19937] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 317.396240][T19931] netlink: 'syz.8.5354': attribute type 6 has an invalid length. [ 317.404074][T19931] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.450620][T19943] loop4: detected capacity change from 0 to 2048 [ 317.469600][T19947] netlink: 'syz.6.5362': attribute type 3 has an invalid length. [ 317.502449][T19943] Alternate GPT is invalid, using primary GPT. [ 317.508778][T19943] loop4: p1 p2 p3 [ 317.523368][T19951] loop6: detected capacity change from 0 to 2048 [ 317.557215][T19955] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 317.571834][T19951] Alternate GPT is invalid, using primary GPT. [ 317.578156][T19955] loop5: detected capacity change from 0 to 2048 [ 317.578287][T19951] loop6: p1 p2 p3 [ 317.614304][T19955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.647097][T19962] xt_hashlimit: max too large, truncated to 1048576 [ 317.655042][T19962] xt_limit: Overflow, try lower: 0/0 [ 317.657032][T19963] loop8: detected capacity change from 0 to 164 [ 317.690298][T19963] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 317.702455][T19955] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 317.724098][T19966] xt_hashlimit: max too large, truncated to 1048576 [ 317.731632][T19955] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1458 with error 28 [ 317.732100][T19966] xt_limit: Overflow, try lower: 0/0 [ 317.744183][T19955] EXT4-fs (loop5): This should not happen!! Data will be lost [ 317.744183][T19955] [ 317.759256][T19955] EXT4-fs (loop5): Total free blocks count 0 [ 317.765352][T19955] EXT4-fs (loop5): Free/Dirty block details [ 317.771471][T19955] EXT4-fs (loop5): free_blocks=2415919104 [ 317.777275][T19955] EXT4-fs (loop5): dirty_blocks=1472 [ 317.782763][T19955] EXT4-fs (loop5): Block reservation details [ 317.788784][T19955] EXT4-fs (loop5): i_reserved_data_blocks=92 [ 317.796171][T19967] EXT4-fs (loop5): shut down requested (0) [ 318.051449][T19978] loop8: detected capacity change from 0 to 512 [ 318.192209][T19980] loop5: detected capacity change from 0 to 2048 [ 318.204472][T19978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.251721][T19980] Alternate GPT is invalid, using primary GPT. [ 318.258187][T19980] loop5: p1 p2 p3 [ 318.401389][T19986] netlink: 'syz.6.5375': attribute type 3 has an invalid length. [ 318.753951][T12494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.775969][T19996] loop9: detected capacity change from 0 to 164 [ 318.784702][T19996] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 318.835775][T19999] loop8: detected capacity change from 0 to 1024 [ 318.843115][T19999] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 318.852878][T19999] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 318.863484][T19999] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.5380: iget: special inode unallocated [ 318.876413][T19999] EXT4-fs (loop8): no journal found [ 318.881859][T19999] EXT4-fs (loop8): can't get journal size [ 318.887889][T19999] EXT4-fs error (device loop8): __ext4_fill_super:5502: inode #2: comm syz.8.5380: iget: special inode unallocated [ 318.900192][T19999] EXT4-fs (loop8): get root inode failed [ 318.905933][T19999] EXT4-fs (loop8): mount failed [ 318.942014][T20005] __nla_validate_parse: 16 callbacks suppressed [ 318.942035][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5382'. [ 318.957462][T20005] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5382'. [ 318.968737][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5382'. [ 319.028575][T20009] netlink: 'syz.5.5384': attribute type 10 has an invalid length. [ 319.071511][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 319.071531][ T29] audit: type=1400 audit(1745923860.709:8712): avc: denied { write } for pid=13149 comm="syz-executor" name="468" dev="tmpfs" ino=2524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 319.111030][ T29] audit: type=1400 audit(1745923860.709:8713): avc: denied { remove_name } for pid=13149 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 319.138569][ T29] audit: type=1400 audit(1745923860.709:8714): avc: denied { rmdir } for pid=13149 comm="syz-executor" name="468" dev="tmpfs" ino=2524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 319.165036][ T29] audit: type=1400 audit(1745923860.779:8715): avc: denied { write } for pid=20012 comm="syz.5.5386" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 319.205775][ T29] audit: type=1400 audit(1745923860.839:8716): avc: denied { read } for pid=20012 comm="syz.5.5386" name="/" dev="configfs" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.228063][ T29] audit: type=1400 audit(1745923860.839:8717): avc: denied { open } for pid=20012 comm="syz.5.5386" path="/" dev="configfs" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.342934][T20022] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5390'. [ 319.376059][T20024] loop6: detected capacity change from 0 to 164 [ 319.386166][T20024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 319.417857][ T29] audit: type=1400 audit(1745923861.049:8718): avc: denied { watch watch_reads } for pid=20026 comm="syz.8.5392" path="/527" dev="tmpfs" ino=2846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.466258][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5393'. [ 319.475199][T20029] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5393'. [ 319.502690][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5393'. [ 319.525003][T20032] loop8: detected capacity change from 0 to 2048 [ 319.572292][T20032] Alternate GPT is invalid, using primary GPT. [ 319.578622][T20032] loop8: p1 p2 p3 [ 319.595853][T20034] loop6: detected capacity change from 0 to 1024 [ 319.605739][T20034] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 319.615613][T20034] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 319.627697][T20034] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #32: comm syz.6.5395: iget: special inode unallocated [ 319.641671][T20034] EXT4-fs (loop6): no journal found [ 319.646900][T20034] EXT4-fs (loop6): can't get journal size [ 319.653135][T20034] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.5395: iget: special inode unallocated [ 319.668621][T20034] EXT4-fs (loop6): get root inode failed [ 319.674402][T20034] EXT4-fs (loop6): mount failed [ 319.771461][T20045] loop9: detected capacity change from 0 to 1764 [ 319.830860][ T23] usb 9-1: enqueue for inactive port 0 [ 319.839984][ T23] usb 9-1: enqueue for inactive port 0 [ 319.910990][ T23] vhci_hcd: vhci_device speed not set [ 320.027551][T20055] loop5: detected capacity change from 0 to 164 [ 320.035979][T20055] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 320.173101][T20061] loop4: detected capacity change from 0 to 2048 [ 320.211236][T20061] Alternate GPT is invalid, using primary GPT. [ 320.217664][T20061] loop4: p1 p2 p3 [ 320.418727][T20068] loop8: detected capacity change from 0 to 256 [ 320.531123][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5410'. [ 320.612243][T20077] loop6: detected capacity change from 0 to 1764 [ 320.799755][T20086] netlink: 'syz.9.5416': attribute type 3 has an invalid length. [ 320.839609][T20090] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5418'. [ 320.867008][T20092] loop9: detected capacity change from 0 to 256 [ 320.976175][T20094] loop9: detected capacity change from 0 to 2048 [ 321.012133][T20094] Alternate GPT is invalid, using primary GPT. [ 321.018429][T20094] loop9: p1 p2 p3 [ 321.035561][T20096] lo speed is unknown, defaulting to 1000 [ 321.098584][T20103] loop5: detected capacity change from 0 to 1764 [ 321.133935][T20106] xt_hashlimit: max too large, truncated to 1048576 [ 321.149730][T20106] xt_limit: Overflow, try lower: 0/0 [ 321.216543][T20096] netlink: 'syz.4.5421': attribute type 6 has an invalid length. [ 321.224333][T20096] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.295311][T20113] netlink: 'syz.4.5428': attribute type 3 has an invalid length. [ 321.317592][T20117] loop5: detected capacity change from 0 to 256 [ 321.329025][T20119] loop4: detected capacity change from 0 to 2048 [ 321.352385][T20119] Alternate GPT is invalid, using primary GPT. [ 321.358797][T20119] loop4: p1 p2 p3 [ 321.438656][T20128] loop5: detected capacity change from 0 to 1764 [ 321.584498][T20136] lo speed is unknown, defaulting to 1000 [ 321.736146][T20136] netlink: 'syz.6.5438': attribute type 6 has an invalid length. [ 321.743923][T20136] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.805329][T20139] loop6: detected capacity change from 0 to 512 [ 321.835669][T20139] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5439: corrupted inode contents [ 321.848166][T20139] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #16: comm syz.6.5439: mark_inode_dirty error [ 321.860133][T20139] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5439: corrupted inode contents [ 321.868998][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5442'. [ 321.874067][T20139] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5439: mark_inode_dirty error [ 321.892547][T20139] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5439: corrupted inode contents [ 321.905104][T20139] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 321.915206][T20139] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5439: corrupted inode contents [ 321.927414][T20139] EXT4-fs error (device loop6): ext4_truncate:4255: inode #16: comm syz.6.5439: mark_inode_dirty error [ 321.939060][T20139] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 321.948771][T20139] EXT4-fs (loop6): 1 truncate cleaned up [ 321.954838][T20139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.967637][T20139] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.978284][ T7342] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 321.988114][ T7342] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 322.002229][T19736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.040505][T20153] loop6: detected capacity change from 0 to 256 [ 322.183358][T20159] loop4: detected capacity change from 0 to 1764 [ 322.269227][ T29] audit: type=1326 audit(1745923863.899:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.6.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa3ae969 code=0x7ffc0000 [ 322.296965][ T29] audit: type=1326 audit(1745923863.939:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.6.5450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83aa3ae969 code=0x7ffc0000 [ 322.352306][T20168] loop5: detected capacity change from 0 to 2048 [ 322.392877][T20174] loop6: detected capacity change from 0 to 2048 [ 322.410022][T20168] Alternate GPT is invalid, using primary GPT. [ 322.416547][T20168] loop5: p1 p2 p3 [ 322.421636][T20174] Alternate GPT is invalid, using primary GPT. [ 322.427887][T20174] loop6: p1 p2 p3 [ 322.496982][T20187] loop8: detected capacity change from 0 to 1764 [ 322.511738][T20190] x_tables: duplicate underflow at hook 1 [ 322.532300][T20192] loop8: detected capacity change from 0 to 164 [ 322.540386][T20195] xt_hashlimit: max too large, truncated to 1048576 [ 322.547849][T20195] xt_limit: Overflow, try lower: 0/0 [ 322.568486][T20198] xt_hashlimit: max too large, truncated to 1048576 [ 322.568532][T20192] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 322.576157][T20198] xt_limit: Overflow, try lower: 0/0 [ 322.863614][T20218] loop9: detected capacity change from 0 to 1764 [ 322.924804][T20224] loop9: detected capacity change from 0 to 164 [ 322.933077][T20224] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 323.227844][T20243] loop6: detected capacity change from 0 to 512 [ 323.243350][T20243] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5484: corrupted inode contents [ 323.255637][T20243] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #16: comm syz.6.5484: mark_inode_dirty error [ 323.267337][T20243] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5484: corrupted inode contents [ 323.279616][T20243] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5484: mark_inode_dirty error [ 323.291127][T20243] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5484: corrupted inode contents [ 323.303322][T20243] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 323.312141][T20243] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5484: corrupted inode contents [ 323.324186][T20243] EXT4-fs error (device loop6): ext4_truncate:4255: inode #16: comm syz.6.5484: mark_inode_dirty error [ 323.335506][T20243] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 323.344842][T20243] EXT4-fs (loop6): 1 truncate cleaned up [ 323.350924][T20243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.363546][T20243] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.363971][ T139] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 323.387608][T19736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.423669][T20249] loop6: detected capacity change from 0 to 164 [ 323.432013][T20249] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 323.545660][T20261] loop8: detected capacity change from 0 to 2048 [ 323.569529][T20259] loop6: detected capacity change from 0 to 1024 [ 323.577645][T20261] Alternate GPT is invalid, using primary GPT. [ 323.584021][T20261] loop8: p1 p2 p3 [ 323.590948][T20259] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 323.601780][T20259] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 323.612297][T20259] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #32: comm syz.6.5491: iget: special inode unallocated [ 323.626550][T20259] EXT4-fs (loop6): no journal found [ 323.631850][T20259] EXT4-fs (loop6): can't get journal size [ 323.637882][T20259] EXT4-fs error (device loop6): __ext4_fill_super:5502: inode #2: comm syz.6.5491: iget: special inode unallocated [ 323.650455][T20259] EXT4-fs (loop6): get root inode failed [ 323.656331][T20259] EXT4-fs (loop6): mount failed [ 323.688630][T20271] loop6: detected capacity change from 0 to 512 [ 323.712916][T20271] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5497: corrupted inode contents [ 323.725018][T20271] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #16: comm syz.6.5497: mark_inode_dirty error [ 323.737484][T20271] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5497: corrupted inode contents [ 323.739121][T20276] xt_hashlimit: max too large, truncated to 1048576 [ 323.749710][T20271] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5497: mark_inode_dirty error [ 323.761046][T20276] xt_limit: Overflow, try lower: 0/0 [ 323.768051][T20271] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5497: corrupted inode contents [ 323.785072][T20271] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 323.794263][T20271] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5497: corrupted inode contents [ 323.806627][T20271] EXT4-fs error (device loop6): ext4_truncate:4255: inode #16: comm syz.6.5497: mark_inode_dirty error [ 323.818354][T20271] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 323.827797][T20271] EXT4-fs (loop6): 1 truncate cleaned up [ 323.834115][T20271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.846659][T20271] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.846983][ T7342] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 323.871838][T19736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.932556][T20282] loop6: detected capacity change from 0 to 164 [ 323.942484][T20282] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 324.003491][T20292] loop9: detected capacity change from 0 to 2048 [ 324.023226][T20294] loop6: detected capacity change from 0 to 2048 [ 324.031276][T20292] Alternate GPT is invalid, using primary GPT. [ 324.037527][T20292] loop9: p1 p2 p3 [ 324.081335][T20294] Alternate GPT is invalid, using primary GPT. [ 324.084259][T20296] lo speed is unknown, defaulting to 1000 [ 324.087643][T20294] loop6: p1 p2 p3 [ 324.097133][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 324.097149][ T29] audit: type=1326 audit(1745923865.719:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45548d5927 code=0x7ffc0000 [ 324.126798][ T29] audit: type=1326 audit(1745923865.719:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f455487ab39 code=0x7ffc0000 [ 324.150212][ T29] audit: type=1326 audit(1745923865.719:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f45548de969 code=0x7ffc0000 [ 324.173695][ T29] audit: type=1326 audit(1745923865.739:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45548d5927 code=0x7ffc0000 [ 324.197264][ T29] audit: type=1326 audit(1745923865.739:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f455487ab39 code=0x7ffc0000 [ 324.220752][ T29] audit: type=1326 audit(1745923865.739:9020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f45548de969 code=0x7ffc0000 [ 324.244495][ T29] audit: type=1326 audit(1745923865.749:9021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45548d5927 code=0x7ffc0000 [ 324.267929][ T29] audit: type=1326 audit(1745923865.749:9022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f455487ab39 code=0x7ffc0000 [ 324.291497][ T29] audit: type=1326 audit(1745923865.749:9023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f45548de969 code=0x7ffc0000 [ 324.315016][ T29] audit: type=1326 audit(1745923865.749:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20266 comm="syz.4.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45548d5927 code=0x7ffc0000 [ 324.326478][T20298] xt_hashlimit: max too large, truncated to 1048576 [ 324.346198][T20301] xt_hashlimit: max too large, truncated to 1048576 [ 324.350972][T20298] xt_limit: Overflow, try lower: 0/0 [ 324.354083][T20301] xt_limit: Overflow, try lower: 0/0 [ 324.414536][T20296] netlink: 'syz.5.5507': attribute type 6 has an invalid length. [ 324.422312][T20296] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.530212][T20309] netlink: 'syz.4.5510': attribute type 3 has an invalid length. [ 324.748545][T20317] loop5: detected capacity change from 0 to 512 [ 324.802890][T20317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.007513][T20322] loop9: detected capacity change from 0 to 164 [ 325.022411][T20322] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 325.085390][T20324] __nla_validate_parse: 12 callbacks suppressed [ 325.085410][T20324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5515'. [ 325.367904][T20334] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 325.374571][T20334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 325.382078][T20334] vhci_hcd vhci_hcd.0: Device attached [ 325.394685][T20334] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(10) [ 325.401416][T20334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.409046][T20334] vhci_hcd vhci_hcd.0: Device attached [ 325.415279][T20334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.424106][T20334] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(14) [ 325.430725][T20334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 325.438185][T20334] vhci_hcd vhci_hcd.0: Device attached [ 325.449938][T20334] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(16) [ 325.456614][T20334] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 325.464345][T20334] vhci_hcd vhci_hcd.0: Device attached [ 325.470791][T20334] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(18) [ 325.477406][T20334] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 325.485029][T20334] vhci_hcd vhci_hcd.0: Device attached [ 325.506435][T20334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.515014][T20334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.523568][T20334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 325.535304][T20346] vhci_hcd: connection closed [ 325.535404][T20343] vhci_hcd: connection closed [ 325.540306][T20340] vhci_hcd: connection closed [ 325.545805][T13149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.561424][ T7342] vhci_hcd: stop threads [ 325.565759][ T7342] vhci_hcd: release socket [ 325.570259][ T7342] vhci_hcd: disconnect device [ 325.579890][T20337] vhci_hcd: connection closed [ 325.580330][T20335] vhci_hcd: connection closed [ 325.598421][ T7342] vhci_hcd: stop threads [ 325.607471][ T7342] vhci_hcd: release socket [ 325.610581][ T1040] vhci_hcd: vhci_device speed not set [ 325.617312][ T7342] vhci_hcd: disconnect device [ 325.625389][ T7342] vhci_hcd: stop threads [ 325.629660][ T7342] vhci_hcd: release socket [ 325.634317][ T7342] vhci_hcd: disconnect device [ 325.640450][T20351] loop4: detected capacity change from 0 to 2048 [ 325.647199][ T7342] vhci_hcd: stop threads [ 325.651623][ T7342] vhci_hcd: release socket [ 325.656073][ T7342] vhci_hcd: disconnect device [ 325.662409][ T7342] vhci_hcd: stop threads [ 325.666681][ T7342] vhci_hcd: release socket [ 325.671275][ T7342] vhci_hcd: disconnect device [ 325.680586][ T1040] usb 17-1: new full-speed USB device number 7 using vhci_hcd [ 325.681702][T20351] Alternate GPT is invalid, using primary GPT. [ 325.694496][T20351] loop4: p1 p2 p3 [ 325.698076][ T1040] usb 17-1: enqueue for inactive port 0 [ 325.710853][ T1040] usb 17-1: enqueue for inactive port 0 [ 325.716596][ T1040] usb 17-1: enqueue for inactive port 0 [ 325.797276][ T1040] vhci_hcd: vhci_device speed not set [ 325.834221][T20356] xt_hashlimit: max too large, truncated to 1048576 [ 325.841711][T20356] xt_limit: Overflow, try lower: 0/0 [ 326.106886][T20358] lo speed is unknown, defaulting to 1000 [ 326.144605][T20362] loop9: detected capacity change from 0 to 2048 [ 326.154691][T20364] loop8: detected capacity change from 0 to 164 [ 326.163739][T20364] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 326.191190][T20362] Alternate GPT is invalid, using primary GPT. [ 326.197670][T20362] loop9: p1 p2 p3 [ 326.251220][T20366] loop8: detected capacity change from 0 to 1024 [ 326.258222][T20366] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 326.267930][T20366] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 326.279624][T20366] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.5528: iget: special inode unallocated [ 326.293721][T20366] EXT4-fs (loop8): no journal found [ 326.298998][T20366] EXT4-fs (loop8): can't get journal size [ 326.301235][T20367] netlink: 'syz.6.5524': attribute type 6 has an invalid length. [ 326.305176][T20366] EXT4-fs error (device loop8): __ext4_fill_super:5502: inode #2: comm syz.8.5528: iget: special inode unallocated [ 326.312657][T20367] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.325881][T20366] EXT4-fs (loop8): get root inode failed [ 326.338140][T20366] EXT4-fs (loop8): mount failed [ 326.388327][T20373] loop8: detected capacity change from 0 to 512 [ 326.407539][T20373] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5530: corrupted inode contents [ 326.423126][T20373] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #16: comm syz.8.5530: mark_inode_dirty error [ 326.434734][T20373] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5530: corrupted inode contents [ 326.461499][T20373] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5530: mark_inode_dirty error [ 326.508197][T20373] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5530: corrupted inode contents [ 326.521643][T20373] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 326.530463][T20373] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5530: corrupted inode contents [ 326.543763][T20373] EXT4-fs error (device loop8): ext4_truncate:4255: inode #16: comm syz.8.5530: mark_inode_dirty error [ 326.563800][T20373] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 326.578662][T20373] EXT4-fs (loop8): 1 truncate cleaned up [ 326.584798][T20373] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.597471][ T7342] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 326.597571][T20373] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.628618][T20389] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 326.635157][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 326.642690][T20389] vhci_hcd vhci_hcd.0: Device attached [ 326.655379][T20389] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(10) [ 326.662001][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.669613][T20389] vhci_hcd vhci_hcd.0: Device attached [ 326.678773][T12494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.693361][T20389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.702876][T20389] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 326.709611][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 326.717262][T20389] vhci_hcd vhci_hcd.0: Device attached [ 326.732796][T20396] loop4: detected capacity change from 0 to 512 [ 326.746219][T20396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.769869][T20389] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(16) [ 326.776521][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 326.784215][T20389] vhci_hcd vhci_hcd.0: Device attached [ 326.794118][T20389] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 326.800743][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 326.808465][T20389] vhci_hcd vhci_hcd.0: Device attached [ 326.817089][T20389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.826879][T20389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.837849][T20389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 326.854899][T20400] vhci_hcd: connection closed [ 326.855146][ T7342] vhci_hcd: stop threads [ 326.864146][ T7342] vhci_hcd: release socket [ 326.868563][ T7342] vhci_hcd: disconnect device [ 326.881280][T20394] vhci_hcd: connection closed [ 326.881568][T20392] vhci_hcd: connection closed [ 326.886690][T20398] vhci_hcd: connection closed [ 326.893412][ T7342] vhci_hcd: stop threads [ 326.902546][ T7342] vhci_hcd: release socket [ 326.906991][ T7342] vhci_hcd: disconnect device [ 326.915027][ T7342] vhci_hcd: stop threads [ 326.919293][ T7342] vhci_hcd: release socket [ 326.923873][ T7342] vhci_hcd: disconnect device [ 326.932126][ T7342] vhci_hcd: stop threads [ 326.936456][ T7342] vhci_hcd: release socket [ 326.940940][ T7342] vhci_hcd: disconnect device [ 326.946281][T20390] vhci_hcd: connection closed [ 326.946556][ T7342] vhci_hcd: stop threads [ 326.955564][ T7342] vhci_hcd: release socket [ 326.960001][ T7342] vhci_hcd: disconnect device [ 327.180820][T20406] IPv6: Can't replace route, no match found [ 327.270566][T20410] loop8: detected capacity change from 0 to 164 [ 327.275840][T20411] loop9: detected capacity change from 0 to 2048 [ 327.285327][T20410] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 327.301166][T20411] Alternate GPT is invalid, using primary GPT. [ 327.307540][T20411] loop9: p1 p2 p3 [ 327.402311][T13542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.422608][T20416] lo speed is unknown, defaulting to 1000 [ 327.451377][T20418] loop5: detected capacity change from 0 to 2048 [ 327.476091][T20420] loop4: detected capacity change from 0 to 1024 [ 327.488322][T20420] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 327.501340][T20418] Alternate GPT is invalid, using primary GPT. [ 327.507673][T20418] loop5: p1 p2 p3 [ 327.510783][T20420] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 327.526856][T20420] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.5542: iget: special inode unallocated [ 327.527734][T20427] smc: net device bond0 applied user defined pnetid SYZ2 [ 327.553829][T20416] netlink: 'syz.8.5541': attribute type 6 has an invalid length. [ 327.561896][T20416] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.570810][T20420] EXT4-fs (loop4): no journal found [ 327.576055][T20420] EXT4-fs (loop4): can't get journal size [ 327.582215][T20427] smc: net device bond0 erased user defined pnetid SYZ2 [ 327.590222][T20420] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.5542: iget: special inode unallocated [ 327.606875][T20420] EXT4-fs (loop4): get root inode failed [ 327.612557][T20420] EXT4-fs (loop4): mount failed [ 327.674473][T20433] xt_hashlimit: max too large, truncated to 1048576 [ 327.682388][T20433] xt_limit: Overflow, try lower: 0/0 [ 327.753030][T20439] loop4: detected capacity change from 0 to 164 [ 327.777206][T20439] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 327.879736][T20447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5553'. [ 327.946623][T20452] x_tables: duplicate underflow at hook 1 [ 327.955647][T20450] lo speed is unknown, defaulting to 1000 [ 328.306279][T20464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.518223][T20478] netlink: 'syz.5.5566': attribute type 3 has an invalid length. [ 328.598104][T20483] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 328.618941][T20483] loop5: detected capacity change from 0 to 2048 [ 328.634208][T20483] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.683449][T20490] loop9: detected capacity change from 0 to 2048 [ 328.711529][T20483] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 328.726733][T20483] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1784 with error 28 [ 328.727687][T20493] loop8: detected capacity change from 0 to 2048 [ 328.739220][T20483] EXT4-fs (loop5): This should not happen!! Data will be lost [ 328.739220][T20483] [ 328.739240][T20483] EXT4-fs (loop5): Total free blocks count 0 [ 328.739256][T20483] EXT4-fs (loop5): Free/Dirty block details [ 328.747695][T20490] Alternate GPT is invalid, using primary GPT. [ 328.755392][T20483] EXT4-fs (loop5): free_blocks=2415919104 [ 328.761609][T20490] loop9: p1 p2 p3 [ 328.767259][T20483] EXT4-fs (loop5): dirty_blocks=1792 [ 328.788327][T20483] EXT4-fs (loop5): Block reservation details [ 328.794361][T20483] EXT4-fs (loop5): i_reserved_data_blocks=112 [ 328.802468][T20494] EXT4-fs (loop5): shut down requested (0) [ 328.841092][T20493] Alternate GPT is invalid, using primary GPT. [ 328.847483][T20493] loop8: p1 p2 p3 [ 328.878460][T20499] loop5: detected capacity change from 0 to 256 [ 328.887885][T20500] xt_hashlimit: max too large, truncated to 1048576 [ 328.895333][T20500] xt_limit: Overflow, try lower: 0/0 [ 329.020101][T20506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.115727][T20512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.249091][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 329.249107][ T29] audit: type=1326 audit(1745923870.879:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20472 comm="syz.6.5563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83aa3ae969 code=0x7fc00000 [ 329.294838][T20517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5579'. [ 329.303943][T20517] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5579'. [ 329.316348][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5579'. [ 329.325818][T20519] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5580'. [ 329.394900][T20523] loop6: detected capacity change from 0 to 2048 [ 329.451367][T20523] Alternate GPT is invalid, using primary GPT. [ 329.457666][T20523] loop6: p1 p2 p3 [ 330.280756][T20550] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 330.298715][T20550] loop6: detected capacity change from 0 to 2048 [ 330.308744][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5592'. [ 330.317823][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5592'. [ 330.324225][T20550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.400866][T20559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5594'. [ 330.419462][T20550] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 330.443906][T20550] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 330.456523][T20550] EXT4-fs (loop6): This should not happen!! Data will be lost [ 330.456523][T20550] [ 330.466205][T20550] EXT4-fs (loop6): Total free blocks count 0 [ 330.472231][T20550] EXT4-fs (loop6): Free/Dirty block details [ 330.478198][T20550] EXT4-fs (loop6): free_blocks=2415919104 [ 330.479055][T20564] netlink: 'syz.4.5595': attribute type 3 has an invalid length. [ 330.483933][T20550] EXT4-fs (loop6): dirty_blocks=2064 [ 330.483951][T20550] EXT4-fs (loop6): Block reservation details [ 330.503061][T20550] EXT4-fs (loop6): i_reserved_data_blocks=129 [ 330.504520][T20562] loop9: detected capacity change from 0 to 2048 [ 330.517076][T20560] EXT4-fs (loop6): shut down requested (0) [ 330.565254][T20562] Alternate GPT is invalid, using primary GPT. [ 330.571639][T20562] loop9: p1 p2 p3 [ 330.691783][T20577] xt_hashlimit: max too large, truncated to 1048576 [ 330.699384][T20577] xt_limit: Overflow, try lower: 0/0 [ 330.733335][T20581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5602'. [ 330.744731][T20576] loop6: detected capacity change from 0 to 512 [ 330.753248][T20576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.913498][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5603'. [ 330.922470][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5603'. [ 330.966324][T20589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5605'. [ 330.993580][T20591] loop5: detected capacity change from 0 to 512 [ 331.013059][T20591] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5606: corrupted inode contents [ 331.025629][T20591] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #16: comm syz.5.5606: mark_inode_dirty error [ 331.037353][T20591] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5606: corrupted inode contents [ 331.049617][T20591] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.5606: mark_inode_dirty error [ 331.061261][T20591] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5606: corrupted inode contents [ 331.073331][T20591] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 331.082140][T20591] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5606: corrupted inode contents [ 331.094228][T20591] EXT4-fs error (device loop5): ext4_truncate:4255: inode #16: comm syz.5.5606: mark_inode_dirty error [ 331.105439][T20591] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 331.114861][T20591] EXT4-fs (loop5): 1 truncate cleaned up [ 331.121010][T20591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.133682][ T7342] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 331.133710][T20591] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.143494][ T7342] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 331.168837][T13149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.328481][T20600] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 331.344549][T20600] loop9: detected capacity change from 0 to 2048 [ 331.362327][T20600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.434516][T20600] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 331.449671][T20600] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2024 with error 28 [ 331.462216][T20600] EXT4-fs (loop9): This should not happen!! Data will be lost [ 331.462216][T20600] [ 331.471987][T20600] EXT4-fs (loop9): Total free blocks count 0 [ 331.478041][T20600] EXT4-fs (loop9): Free/Dirty block details [ 331.484060][T20600] EXT4-fs (loop9): free_blocks=2415919104 [ 331.489776][T20600] EXT4-fs (loop9): dirty_blocks=2032 [ 331.495112][T20600] EXT4-fs (loop9): Block reservation details [ 331.501148][T20600] EXT4-fs (loop9): i_reserved_data_blocks=127 [ 331.516031][T20608] EXT4-fs (loop9): shut down requested (0) [ 331.584813][T19736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.653565][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5614'. [ 331.662576][T20614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5614'. [ 331.699674][T20619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5616'. [ 331.731374][T20623] loop4: detected capacity change from 0 to 512 [ 331.742788][T20623] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.5617: corrupted inode contents [ 331.756377][T20623] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #16: comm syz.4.5617: mark_inode_dirty error [ 331.768036][T20623] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.5617: corrupted inode contents [ 331.780457][T20623] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.5617: mark_inode_dirty error [ 331.792024][ T29] audit: type=1326 audit(1745923873.429:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20606 comm="syz.8.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7fc00000 [ 331.792074][T20623] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.5617: corrupted inode contents [ 331.792218][T20623] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 331.816187][ T29] audit: type=1326 audit(1745923873.459:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20606 comm="syz.8.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac9317e969 code=0x7fc00000 [ 331.829877][T20623] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.5617: corrupted inode contents [ 331.871832][T20623] EXT4-fs error (device loop4): ext4_truncate:4255: inode #16: comm syz.4.5617: mark_inode_dirty error [ 331.883371][T20623] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 331.892840][T20623] EXT4-fs (loop4): 1 truncate cleaned up [ 331.898944][T20623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.911660][T20623] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.922328][ T7342] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 331.932171][ T7342] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 331.945418][T13542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.036831][T20637] nfs4: Unknown parameter '' [ 332.049279][T20637] loop5: detected capacity change from 0 to 2048 [ 332.062169][T20637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.136151][T20637] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 332.151703][T20637] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 332.164249][T20637] EXT4-fs (loop5): This should not happen!! Data will be lost [ 332.164249][T20637] [ 332.173917][T20637] EXT4-fs (loop5): Total free blocks count 0 [ 332.179934][T20637] EXT4-fs (loop5): Free/Dirty block details [ 332.185909][T20637] EXT4-fs (loop5): free_blocks=2415919104 [ 332.191724][T20637] EXT4-fs (loop5): dirty_blocks=2176 [ 332.197083][T20637] EXT4-fs (loop5): Block reservation details [ 332.203254][T20637] EXT4-fs (loop5): i_reserved_data_blocks=136 [ 332.210444][T20643] EXT4-fs (loop5): shut down requested (0) [ 332.300540][ T29] audit: type=1326 audit(1745923873.929:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20606 comm="syz.8.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7fc00000 [ 332.324125][ T29] audit: type=1326 audit(1745923873.929:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20606 comm="syz.8.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fac9317e969 code=0x7fc00000 [ 332.347663][ T29] audit: type=1326 audit(1745923873.929:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20606 comm="syz.8.5611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7fc00000 [ 332.395641][T20647] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 332.410854][T20647] loop5: detected capacity change from 0 to 2048 [ 332.431984][T20647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.481768][ T29] audit: type=1400 audit(1745923874.109:9190): avc: denied { write } for pid=20652 comm="syz.6.5627" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.502118][ T29] audit: type=1400 audit(1745923874.109:9191): avc: denied { read } for pid=20652 comm="syz.6.5627" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.555945][T20658] EXT4-fs (loop5): shut down requested (0) [ 332.593881][T20647] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 332.611263][T20647] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 332.623829][T20647] EXT4-fs (loop5): This should not happen!! Data will be lost [ 332.623829][T20647] [ 332.633550][T20647] EXT4-fs (loop5): Total free blocks count 0 [ 332.640041][T20647] EXT4-fs (loop5): Free/Dirty block details [ 332.645989][T20647] EXT4-fs (loop5): free_blocks=2415919104 [ 332.651896][T20647] EXT4-fs (loop5): dirty_blocks=3472 [ 332.657279][T20647] EXT4-fs (loop5): Block reservation details [ 332.663300][T20647] EXT4-fs (loop5): i_reserved_data_blocks=217 [ 332.703129][T20671] smc: net device bond0 applied user defined pnetid SYZ2 [ 332.718581][T20671] loop9: detected capacity change from 0 to 1024 [ 332.728971][T20671] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.5633: Failed to acquire dquot type 0 [ 332.742083][T20671] EXT4-fs (loop9): 1 truncate cleaned up [ 332.748160][T20671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.767457][T20671] smc: net device bond0 erased user defined pnetid SYZ2 [ 332.787622][T12961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.983062][T20695] x_tables: duplicate underflow at hook 1 [ 333.009145][T20697] IPv6: Can't replace route, no match found [ 333.509787][T20705] smc: net device bond0 applied user defined pnetid SYZ2 [ 333.526292][T20705] loop8: detected capacity change from 0 to 1024 [ 333.538493][T20705] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5648: Failed to acquire dquot type 0 [ 333.553035][T20705] EXT4-fs (loop8): 1 truncate cleaned up [ 333.559384][T20705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.576425][T20705] smc: net device bond0 erased user defined pnetid SYZ2 [ 333.593992][T12494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.632684][T20715] loop8: detected capacity change from 0 to 512 [ 333.643914][T20715] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5652: corrupted inode contents [ 333.656109][T20715] EXT4-fs error (device loop8): ext4_dirty_inode:6103: inode #16: comm syz.8.5652: mark_inode_dirty error [ 333.667812][T20715] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5652: corrupted inode contents [ 333.680139][T20715] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5652: mark_inode_dirty error [ 333.691954][T20715] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5652: corrupted inode contents [ 333.704155][T20715] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 333.712863][T20715] EXT4-fs error (device loop8): ext4_do_update_inode:5211: inode #16: comm syz.8.5652: corrupted inode contents [ 333.724967][T20715] EXT4-fs error (device loop8): ext4_truncate:4255: inode #16: comm syz.8.5652: mark_inode_dirty error [ 333.736379][T20715] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 333.743050][T20719] netlink: 'syz.5.5653': attribute type 3 has an invalid length. [ 333.747117][T20715] EXT4-fs (loop8): 1 truncate cleaned up [ 333.760087][T20715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.781975][T20715] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.792692][ T7703] EXT4-fs error (device loop8): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 333.830246][T12494] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.957506][T20737] loop5: detected capacity change from 0 to 2048 [ 333.991836][T20741] x_tables: duplicate underflow at hook 1 [ 334.001451][T20737] Alternate GPT is invalid, using primary GPT. [ 334.007792][T20737] loop5: p1 p2 p3 [ 334.020219][T20743] loop8: detected capacity change from 0 to 256 [ 334.121858][T20746] syz.8.5664: attempt to access beyond end of device [ 334.121858][T20746] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 334.139849][T20747] xt_hashlimit: max too large, truncated to 1048576 [ 334.154734][T20746] lo speed is unknown, defaulting to 1000 [ 334.162280][T20747] xt_limit: Overflow, try lower: 0/0 [ 334.186743][T20749] loop9: detected capacity change from 0 to 1024 [ 334.194106][T20749] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 334.203798][T20749] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 334.214351][T20749] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #32: comm syz.9.5665: iget: special inode unallocated [ 334.227539][T20749] EXT4-fs (loop9): no journal found [ 334.232866][T20749] EXT4-fs (loop9): can't get journal size [ 334.238863][T20749] EXT4-fs error (device loop9): __ext4_fill_super:5502: inode #2: comm syz.9.5665: iget: special inode unallocated [ 334.251893][T20749] EXT4-fs (loop9): get root inode failed [ 334.257618][T20749] EXT4-fs (loop9): mount failed [ 334.265908][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 334.265924][ T29] audit: type=1400 audit(1745923875.899:9311): avc: denied { create } for pid=20748 comm="syz.9.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 334.446807][ T29] audit: type=1400 audit(1745923876.079:9312): avc: denied { connect } for pid=20761 comm="syz.8.5670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.522706][ T29] audit: type=1326 audit(1745923876.159:9313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20752 comm="syz.9.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b10a2e969 code=0x7fc00000 [ 334.571339][T20767] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 334.589757][T20767] loop6: detected capacity change from 0 to 2048 [ 334.613746][T20767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.670119][ T29] audit: type=1326 audit(1745923876.299:9314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.674829][T20776] IPv6: Can't replace route, no match found [ 334.702699][ T29] audit: type=1326 audit(1745923876.299:9315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.726308][ T29] audit: type=1326 audit(1745923876.309:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.750102][ T29] audit: type=1326 audit(1745923876.309:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.762432][T20778] EXT4-fs (loop6): shut down requested (0) [ 334.773757][ T29] audit: type=1326 audit(1745923876.309:9318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.803070][ T29] audit: type=1326 audit(1745923876.309:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.826700][ T29] audit: type=1326 audit(1745923876.309:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20775 comm="syz.8.5675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9317e969 code=0x7ffc0000 [ 334.860237][T20767] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 334.879480][T20767] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 334.891966][T20767] EXT4-fs (loop6): This should not happen!! Data will be lost [ 334.891966][T20767] [ 334.901670][T20767] EXT4-fs (loop6): Total free blocks count 0 [ 334.907745][T20767] EXT4-fs (loop6): Free/Dirty block details [ 334.913790][T20767] EXT4-fs (loop6): free_blocks=2415919104 [ 334.919694][T20767] EXT4-fs (loop6): dirty_blocks=3168 [ 334.924999][T20767] EXT4-fs (loop6): Block reservation details [ 334.931084][T20767] EXT4-fs (loop6): i_reserved_data_blocks=198 [ 334.981419][T20780] loop8: detected capacity change from 0 to 1024 [ 334.992824][T20780] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 334.996105][T20786] nfs4: Unknown parameter '' [ 335.002467][T20780] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 335.002862][T20780] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.5676: iget: special inode unallocated [ 335.015290][T20784] 9pnet_fd: Insufficient options for proto=fd [ 335.018731][T20780] EXT4-fs (loop8): no journal found [ 335.041543][T20780] EXT4-fs (loop8): can't get journal size [ 335.047580][T20786] loop4: detected capacity change from 0 to 2048 [ 335.054178][T20780] EXT4-fs error (device loop8): __ext4_fill_super:5502: inode #2: comm syz.8.5676: iget: special inode unallocated [ 335.068349][T20780] EXT4-fs (loop8): get root inode failed [ 335.074036][T20780] EXT4-fs (loop8): mount failed [ 335.080663][T20786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.145268][T20791] loop6: detected capacity change from 0 to 512 [ 335.193981][T20786] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 335.211016][T20786] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1466 with error 28 [ 335.223577][T20786] EXT4-fs (loop4): This should not happen!! Data will be lost [ 335.223577][T20786] [ 335.227407][T20791] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5680: corrupted inode contents [ 335.233328][T20786] EXT4-fs (loop4): Total free blocks count 0 [ 335.247085][T20791] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #16: comm syz.6.5680: mark_inode_dirty error [ 335.251244][T20786] EXT4-fs (loop4): Free/Dirty block details [ 335.264404][T20791] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5680: corrupted inode contents [ 335.268407][T20786] EXT4-fs (loop4): free_blocks=2415919104 [ 335.268426][T20786] EXT4-fs (loop4): dirty_blocks=1472 [ 335.281282][T20791] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5680: mark_inode_dirty error [ 335.286069][T20786] EXT4-fs (loop4): Block reservation details [ 335.292676][T20791] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5680: corrupted inode contents [ 335.302556][T20786] EXT4-fs (loop4): i_reserved_data_blocks=92 [ 335.309302][T20791] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 335.341078][T20791] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5680: corrupted inode contents [ 335.354224][T20791] EXT4-fs error (device loop6): ext4_truncate:4255: inode #16: comm syz.6.5680: mark_inode_dirty error [ 335.372799][T20791] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 335.393524][T20791] EXT4-fs (loop6): 1 truncate cleaned up [ 335.406365][T20791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.414054][T20808] lo speed is unknown, defaulting to 1000 [ 335.425133][ T7417] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:20: Failed to release dquot type 1 [ 335.430131][T20791] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.451870][T20786] EXT4-fs (loop4): shut down requested (0) [ 335.512658][T20811] IPv6: Can't replace route, no match found [ 335.520778][T19736] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.537343][T20808] netlink: 'syz.9.5685': attribute type 6 has an invalid length. [ 335.545171][T20808] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.591518][T20815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.708077][T20825] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 335.724482][T20825] loop6: detected capacity change from 0 to 2048 [ 335.742320][T20825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.819225][T20825] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 335.834104][T20825] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 335.846684][T20825] EXT4-fs (loop6): This should not happen!! Data will be lost [ 335.846684][T20825] [ 335.856341][T20825] EXT4-fs (loop6): Total free blocks count 0 [ 335.862400][T20825] EXT4-fs (loop6): Free/Dirty block details [ 335.868322][T20825] EXT4-fs (loop6): free_blocks=2415919104 [ 335.874058][T20825] EXT4-fs (loop6): dirty_blocks=2224 [ 335.879367][T20825] EXT4-fs (loop6): Block reservation details [ 335.885408][T20825] EXT4-fs (loop6): i_reserved_data_blocks=139 [ 335.892484][T20830] EXT4-fs (loop6): shut down requested (0) [ 336.022909][T20838] netlink: 'syz.5.5694': attribute type 3 has an invalid length. [ 336.026748][T20840] loop6: detected capacity change from 0 to 256 [ 336.057348][T20842] loop5: detected capacity change from 0 to 2048 [ 336.112148][T20842] Alternate GPT is invalid, using primary GPT. [ 336.118574][T20842] loop5: p1 p2 p3 [ 336.134546][T20846] IPv6: Can't replace route, no match found [ 336.165067][T20850] ip6tnl1: entered promiscuous mode [ 336.170354][T20850] ip6tnl1: entered allmulticast mode [ 336.179890][T20848] lo speed is unknown, defaulting to 1000 [ 336.234071][T20854] xt_hashlimit: max too large, truncated to 1048576 [ 336.251163][T20854] xt_limit: Overflow, try lower: 0/0 [ 336.284509][T20848] netlink: 'syz.8.5699': attribute type 6 has an invalid length. [ 336.292494][T20848] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.344709][T20856] SELinux: security_context_str_to_sid (·) failed with errno=-22 [ 336.362650][T20856] loop6: detected capacity change from 0 to 2048 [ 336.378866][T20856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.461286][T20856] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 336.476839][T20856] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1822 with error 28 [ 336.489348][T20856] EXT4-fs (loop6): This should not happen!! Data will be lost [ 336.489348][T20856] [ 336.499046][T20856] EXT4-fs (loop6): Total free blocks count 0 [ 336.505217][T20856] EXT4-fs (loop6): Free/Dirty block details [ 336.511201][T20856] EXT4-fs (loop6): free_blocks=2415919104 [ 336.516945][T20856] EXT4-fs (loop6): dirty_blocks=1824 [ 336.522352][T20856] EXT4-fs (loop6): Block reservation details [ 336.528348][T20856] EXT4-fs (loop6): i_reserved_data_blocks=114 [ 336.558990][T20856] EXT4-fs (loop6): shut down requested (0) [ 336.569743][T20866] __nla_validate_parse: 13 callbacks suppressed [ 336.569763][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5704'. [ 336.804399][T20881] dummy0: left promiscuous mode [ 336.814485][T20881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.890930][T20887] lo speed is unknown, defaulting to 1000 [ 337.063829][T20887] netlink: 'syz.8.5712': attribute type 6 has an invalid length. [ 337.128453][T20900] lo speed is unknown, defaulting to 1000 [ 337.331260][T20900] netlink: 'syz.8.5715': attribute type 6 has an invalid length. [ 337.339030][T20900] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.405117][T20905] syz.4.5717: attempt to access beyond end of device [ 337.405117][T20905] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.433440][T20905] lo speed is unknown, defaulting to 1000 [ 337.659025][T20921] x_tables: duplicate underflow at hook 1 [ 337.665200][T20920] loop9: detected capacity change from 0 to 164 [ 337.687094][T20920] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 337.729090][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5726'. [ 337.744302][T20928] loop9: detected capacity change from 0 to 2048 [ 337.801463][T20928] Alternate GPT is invalid, using primary GPT. [ 337.807927][T20928] loop9: p1 p2 p3 [ 337.912391][T20944] loop5: detected capacity change from 0 to 256 [ 337.949756][T20948] x_tables: duplicate underflow at hook 1 [ 337.972124][T20950] loop9: detected capacity change from 0 to 164 [ 337.981348][T20950] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 338.011126][T20954] loop9: detected capacity change from 0 to 512 [ 338.023968][T20954] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5739: corrupted inode contents [ 338.036375][T20954] EXT4-fs error (device loop9): ext4_dirty_inode:6103: inode #16: comm syz.9.5739: mark_inode_dirty error [ 338.048094][T20954] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5739: corrupted inode contents [ 338.060437][T20954] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.5739: mark_inode_dirty error [ 338.073462][T20954] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5739: corrupted inode contents [ 338.085576][T20954] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 338.095641][T20954] EXT4-fs error (device loop9): ext4_do_update_inode:5211: inode #16: comm syz.9.5739: corrupted inode contents [ 338.107849][T20954] EXT4-fs error (device loop9): ext4_truncate:4255: inode #16: comm syz.9.5739: mark_inode_dirty error [ 338.119205][T20954] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 338.128848][T20954] EXT4-fs (loop9): 1 truncate cleaned up [ 338.135104][T20954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.148020][T20954] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.147992][ T7342] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 338.173352][T12961] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.243127][T20963] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5742'. [ 338.284849][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5744'. [ 338.465205][T20985] loop9: detected capacity change from 0 to 164 [ 338.475102][T20985] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 338.489387][T20976] lo speed is unknown, defaulting to 1000 [ 338.510977][T20989] loop9: detected capacity change from 0 to 2048 [ 338.546285][T20976] chnl_net:caif_netlink_parms(): no params data found [ 338.562748][T20989] Alternate GPT is invalid, using primary GPT. [ 338.569085][T20989] loop9: p1 p2 p3 [ 338.587669][ T139] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.608896][T20995] netlink: 'syz.6.5751': attribute type 3 has an invalid length. [ 338.616791][T20976] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.624121][T20976] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.632000][T20976] bridge_slave_0: entered allmulticast mode [ 338.638539][T20976] bridge_slave_0: entered promiscuous mode [ 338.645376][T20976] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.652586][T20976] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.659835][T20976] bridge_slave_1: entered allmulticast mode [ 338.666298][T20976] bridge_slave_1: entered promiscuous mode [ 338.686814][T20998] xt_hashlimit: max too large, truncated to 1048576 [ 338.696180][ T139] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.697034][T20998] xt_limit: Overflow, try lower: 0/0 [ 338.700617][T20976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.702305][T20976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.744124][ T139] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.746131][T20976] team0: Port device team_slave_0 added [ 338.760076][T20976] team0: Port device team_slave_1 added [ 338.778656][T20976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.785669][T20976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.811685][T20976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.823747][ T139] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.835804][T20976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.842844][T20976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.868808][T20976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.895950][T21007] loop6: detected capacity change from 0 to 512 [ 338.904504][T21008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 338.911050][T21008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.918603][T21008] vhci_hcd vhci_hcd.0: Device attached [ 338.927344][T20976] hsr_slave_0: entered promiscuous mode [ 338.933612][T20976] hsr_slave_1: entered promiscuous mode [ 338.940116][T20976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.944418][T21007] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5755: corrupted inode contents [ 338.947796][T20976] Cannot create hsr debugfs directory [ 338.971393][T21008] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 338.978029][T21008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.985576][T21008] vhci_hcd vhci_hcd.0: Device attached [ 338.992590][T21007] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #16: comm syz.6.5755: mark_inode_dirty error [ 339.004198][T21007] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5755: corrupted inode contents [ 339.008615][T21017] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.025721][T21007] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5755: mark_inode_dirty error [ 339.037556][T21008] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12) [ 339.037584][T21007] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5755: corrupted inode contents [ 339.037683][T21008] ================================================================== [ 339.044419][T21007] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 339.056037][T21008] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 339.064349][T21007] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.5755: corrupted inode contents [ 339.072571][T21008] [ 339.072580][T21008] write to 0xffffffff868801c0 of 8 bytes by task 21007 on cpu 1: [ 339.072600][T21008] data_alloc+0x271/0x2b0 [ 339.079743][T21007] EXT4-fs error (device loop6): ext4_truncate:4255: inode #16: comm syz.6.5755: mark_inode_dirty error [ 339.091305][T21008] prb_reserve+0x808/0xaf0 [ 339.091346][T21008] vprintk_store+0x56d/0x860 [ 339.091382][T21008] vprintk_emit+0x178/0x650 [ 339.110516][T21007] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 339.116766][T21008] vprintk_default+0x26/0x30 [ 339.116807][T21008] vprintk+0x1d/0x30 [ 339.121834][T21007] EXT4-fs (loop6): 1 truncate cleaned up [ 339.125778][T21008] _printk+0x79/0xa0 [ 339.157181][T21008] __ext4_error_inode+0x2ca/0x3f0 [ 339.162228][T21008] ext4_mark_iloc_dirty+0x35e/0xda0 [ 339.167443][T21008] ext4_orphan_del+0x6db/0x710 [ 339.172221][T21008] ext4_truncate+0x882/0xac0 [ 339.176820][T21008] ext4_process_orphan+0x110/0x1c0 [ 339.181949][T21008] ext4_orphan_cleanup+0x6a8/0xa00 [ 339.187081][T21008] ext4_fill_super+0x3171/0x34e0 [ 339.192034][T21008] get_tree_bdev_flags+0x28e/0x300 [ 339.197156][T21008] get_tree_bdev+0x1f/0x30 [ 339.201580][T21008] ext4_get_tree+0x1c/0x30 [ 339.206013][T21008] vfs_get_tree+0x54/0x1d0 [ 339.210438][T21008] do_new_mount+0x207/0x680 [ 339.214951][T21008] path_mount+0x4a4/0xb20 [ 339.219306][T21008] __se_sys_mount+0x28f/0x2e0 [ 339.223996][T21008] __x64_sys_mount+0x67/0x80 [ 339.228593][T21008] x64_sys_call+0xd36/0x2fb0 [ 339.233190][T21008] do_syscall_64+0xd0/0x1a0 [ 339.237703][T21008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.243607][T21008] [ 339.245933][T21008] read to 0xffffffff868801c0 of 16 bytes by task 21008 on cpu 0: [ 339.253656][T21008] _prb_read_valid+0x1bc/0x920 [ 339.258437][T21008] prb_final_commit+0x136/0x1e0 [ 339.263304][T21008] vprintk_store+0x741/0x860 [ 339.267914][T21008] vprintk_emit+0x178/0x650 [ 339.272420][T21008] dev_vprintk_emit+0x242/0x2a0 [ 339.277280][T21008] dev_printk_emit+0x84/0xb0 [ 339.281876][T21008] __dev_printk+0xf3/0x110 [ 339.286301][T21008] _dev_info+0x9b/0xd0 [ 339.290375][T21008] attach_store+0x495/0x680 [ 339.294895][T21008] dev_attr_store+0x47/0x70 [ 339.299414][T21008] sysfs_kf_write+0xfb/0x120 [ 339.304022][T21008] kernfs_fop_write_iter+0x1be/0x2d0 [ 339.309323][T21008] vfs_write+0x49d/0x8d0 [ 339.313662][T21008] ksys_write+0xda/0x1a0 [ 339.317912][T21008] __x64_sys_write+0x40/0x50 [ 339.322511][T21008] x64_sys_call+0x2cdd/0x2fb0 [ 339.327195][T21008] do_syscall_64+0xd0/0x1a0 [ 339.331711][T21008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.337612][T21008] [ 339.339934][T21008] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 339.346103][T21008] CPU: 0 UID: 0 PID: 21008 Comm: syz.4.5756 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 339.358612][T21008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.368694][T21008] ================================================================== [ 339.376789][T21008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 339.384256][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 339.384274][ T29] audit: type=1400 audit(1745923880.779:9508): avc: denied { write } for pid=3294 comm="syz-executor" path="pipe:[2490]" dev="pipefs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 339.384416][T21008] vhci_hcd vhci_hcd.0: Device attached [ 339.419846][ T29] audit: type=1400 audit(1745923881.029:9509): avc: denied { recv } for pid=20988 comm="syz.9.5750" saddr=10.128.0.163 src=32788 daddr=10.128.1.128 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 339.430556][T13250] vhci_hcd: vhci_device speed not set [ 339.453894][ T7703] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 339.460765][T21007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.463744][ T7703] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:25: Failed to release dquot type 1 [ 339.496036][T21007] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.499853][T21017] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 339.513035][T21017] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.520758][T21017] vhci_hcd vhci_hcd.0: Device attached [ 339.544945][ T29] audit: type=1400 audit(1745923881.179:9510): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 339.560923][T13250] usb 9-1: new full-speed USB device number 8 using vhci_hcd [ 339.567056][ T29] audit: type=1400 audit(1745923881.179:9511): avc: denied { search } for pid=2988 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.596207][ T29] audit: type=1400 audit(1745923881.179:9512): avc: denied { append } for pid=2988 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.618553][ T29] audit: type=1400 audit(1745923881.179:9513): avc: denied { open } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.641153][ T29] audit: type=1400 audit(1745923881.179:9514): avc: denied { getattr } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 339.665313][T21025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.715305][ T29] audit: type=1326 audit(1745923881.329:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21015 comm="syz.5.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1543e969 code=0x7fc00000 [ 339.771852][T21008] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(16) [ 339.778492][T21008] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.786096][T21008] vhci_hcd vhci_hcd.0: Device attached [ 339.793291][T21007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.804667][ T139] bond0 (unregistering): Released all slaves [ 339.814835][ T139] bond1 (unregistering): Released all slaves [ 339.855083][ T139] hsr_slave_0: left promiscuous mode [ 339.861095][ T139] hsr_slave_1: left promiscuous mode [ 339.869802][ T139] batadv0: left promiscuous mode [ 339.875144][ T139] veth1_macvtap: left promiscuous mode [ 339.880786][ T139] veth0_macvtap: left promiscuous mode [ 339.886303][ T139] veth1_vlan: left promiscuous mode [ 339.891637][ T139] veth0_vlan: left promiscuous mode [ 339.971553][ T23] lo speed is unknown, defaulting to 1000 [ 339.977301][ T23] syz2: Port: 1 Link DOWN [ 340.073623][T21018] vhci_hcd: connection closed [ 340.073711][T21023] vhci_hcd: connection closed [ 340.073814][T21020] vhci_hcd: connection closed [ 340.083526][ T6799] vhci_hcd: stop threads [ 340.092537][ T6799] vhci_hcd: release socket [ 340.096968][ T6799] vhci_hcd: disconnect device [ 340.102449][T21009] vhci_hcd: connection reset by peer [ 340.107859][T21011] vhci_hcd: connection closed [ 340.107907][ T6799] vhci_hcd: stop threads [ 340.116910][ T6799] vhci_hcd: release socket [ 340.121409][ T6799] vhci_hcd: disconnect device [ 340.126859][ T6799] vhci_hcd: stop threads [ 340.131147][ T6799] vhci_hcd: release socket [ 340.135590][ T6799] vhci_hcd: disconnect device [ 340.140523][ T6799] vhci_hcd: stop threads [ 340.144772][ T6799] vhci_hcd: release socket [ 340.149284][ T6799] vhci_hcd: disconnect device [ 340.154439][ T6799] vhci_hcd: stop threads [ 340.158693][ T6799] vhci_hcd: release socket [ 340.163184][ T6799] vhci_hcd: disconnect device [ 340.325357][ T139] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.382303][ T139] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.451732][ T139] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.511817][ T139] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.575657][ T139] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.641824][ T139] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.681921][ T139] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.731927][ T139] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.804598][ T139] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.872261][ T139] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.911749][ T139] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.971759][ T139] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.046306][ T139] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.093016][ T139] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.133183][ T139] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.173727][ T139] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.235954][ T139] bridge_slave_1: left allmulticast mode [ 341.241707][ T139] bridge_slave_1: left promiscuous mode [ 341.247386][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.255016][ T139] bridge_slave_0: left allmulticast mode [ 341.260693][ T139] bridge_slave_0: left promiscuous mode [ 341.266487][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.672255][ T139] bond0 (unregistering): Released all slaves [ 341.680692][ T139] bond0 (unregistering): Released all slaves [ 341.689403][ T139] bond0 (unregistering): left promiscuous mode [ 341.695944][ T139] bond0 (unregistering): Released all slaves [ 341.704356][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.714180][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.723488][ T139] bond0 (unregistering): Released all slaves [ 341.732343][ T139] bond0 (unregistering): Released all slaves [ 341.814622][ T139] tipc: Disabling bearer [ 341.819599][ T139] tipc: Left network mode [ 341.829017][ T139] hsr_slave_0: left promiscuous mode [ 341.834660][ T139] hsr_slave_1: left promiscuous mode [ 341.842666][ T139] hsr_slave_0: left promiscuous mode [ 341.848325][ T139] hsr_slave_1: left promiscuous mode [ 341.854368][ T139] batadv0: left promiscuous mode [ 341.861558][ T139] hsr_slave_0: left promiscuous mode [ 341.867195][ T139] hsr_slave_1: left promiscuous mode [ 341.873209][ T139] hsr_slave_0: left promiscuous mode [ 341.878869][ T139] hsr_slave_1: left promiscuous mode [ 341.884560][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.892180][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.901592][ T139] hsr_slave_0: left promiscuous mode [ 341.907240][ T139] hsr_slave_1: left promiscuous mode [ 341.927173][ T139] batadv0: left promiscuous mode [ 341.932343][ T139] veth1_macvtap: left promiscuous mode [ 341.937916][ T139] veth0_macvtap: left promiscuous mode [ 341.943530][ T139] veth1_vlan: left promiscuous mode [ 341.948741][ T139] veth0_vlan: left promiscuous mode [ 341.954719][ T139] batadv0: left promiscuous mode [ 341.959723][ T139] veth1_macvtap: left promiscuous mode [ 341.965258][ T139] veth0_macvtap: left promiscuous mode [ 341.970840][ T139] veth1_vlan: left promiscuous mode [ 341.976082][ T139] veth0_vlan: left promiscuous mode [ 341.981792][ T139] veth1_macvtap: left promiscuous mode [ 341.987328][ T139] veth0_macvtap: left promiscuous mode [ 341.992883][ T139] veth1_vlan: left promiscuous mode [ 341.998163][ T139] veth0_vlan: left promiscuous mode [ 342.006577][ T139] veth1_macvtap: left promiscuous mode [ 342.012103][ T139] veth0_macvtap: left promiscuous mode [ 342.017592][ T139] veth1_vlan: left promiscuous mode [ 342.022900][ T139] veth0_vlan: left promiscuous mode [ 342.294813][ T139] team0 (unregistering): Port device team_slave_1 removed [ 342.303886][ T139] team0 (unregistering): Port device team_slave_0 removed [ 344.710622][T13250] usb 9-1: enqueue for inactive port 0 [ 344.716244][T13250] usb 9-1: enqueue for inactive port 0 [ 344.790612][T13250] vhci_hcd: vhci_device speed not set