last executing test programs: 4m44.106604241s ago: executing program 32 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async, rerun: 32) fcntl$getflags(r0, 0x401) (async, rerun: 32) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@restrict={0xb}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/123, 0x35, 0x7b, 0x0, 0x80000001}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x5, 0x7, 0xfffffff1, 0x4880, 0x1, 0x5, '\x00', 0x0, r6, 0x3, 0x3, 0x2, 0x1}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) (async) r7 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 4m27.914950784s ago: executing program 2 (id=1570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x804844, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX=r3]) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x3}, {0x4, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x1, 0x1}, {0x3}}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x7fff}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000700)={@private1, 0x0}, &(0x7f00000009c0)=0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7c829da053d4dd18}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x7, 0xed, &(0x7f00000008c0)=""/237, 0x1f00, 0xf, '\x00', r7, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xa, 0x7, 0x8001}, 0x10, 0x14d42, r8, 0x2, &(0x7f0000000ac0)=[r0, r9, r0, r0, r0, r3], &(0x7f0000000b00)=[{0x3, 0x4, 0x6, 0x6}, {0x2, 0x3, 0x2, 0xb}], 0x10, 0x8}, 0x94) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r6, &(0x7f0000001240)=[{&(0x7f0000000100)="88", 0x1}, {&(0x7f0000000040)="ca37f0927601c80f7eb285b036f865ded0d27517f5cbe3dfbcbfb5cae62125f9475020317214250a9f7d18b2bd57af93b6740ff3906d00ba82b7aba9b1eb49f7ba1aced5f8bdfa92b0208f2b859d6c3506c8c19b058c05944b6d6a", 0x5b}, {&(0x7f0000000140)="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", 0x4b9}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r10) sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 4m27.819993594s ago: executing program 2 (id=1571): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) listen(r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5e}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7f}}}}}}}, 0x0) 4m27.75604004s ago: executing program 2 (id=1572): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09d0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f0000000000000000000000000000000000000500", [0x4, 0x40000000000000]}}) 4m27.595963936s ago: executing program 2 (id=1574): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83d00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000002}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020c3028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 4m27.560026799s ago: executing program 2 (id=1576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000010000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 4m27.496957425s ago: executing program 2 (id=1578): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 4m12.344536036s ago: executing program 33 (id=1578): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 2m12.259655044s ago: executing program 6 (id=3526): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x5}, 0x4) (async) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'caif0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6e99, 0x8000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) r3 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3c, 0x0, 0x60) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='cpu_frequency_limits\x00', r4}, 0x18) 2m12.20182474s ago: executing program 6 (id=3527): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295", @ANYRES64], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x518, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12000, 0x178) fchown(r4, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="3616d233472e", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="0859862c6e7cf97e5e25bf44fbd3570000007fb5c9b4807275a9034f51e205f2000000000000001000"/53, @ANYRES64=0x0], 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="08004500001c0066000139000011907800000000e0000029884b0f4ab24154fd"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x2292}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000035c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd5, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071105300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 2m11.908465799s ago: executing program 6 (id=3534): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwritev2(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0xfffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x8000, 0x5199b13398705b05) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 2m11.812045308s ago: executing program 6 (id=3536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) getgroups(0x1, &(0x7f00000001c0)=[0x0]) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000000000cde30000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000002c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.334853485s ago: executing program 6 (id=3540): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000001f00000400000000000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x804) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2c) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00yO$']) 2m10.840480624s ago: executing program 6 (id=3545): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000140)={0x60, 0x31, 0x0, 0xb, 0x2, 0xce7, &(0x7f0000000100)="5bdd"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r7 = socket(0xa, 0x3, 0x3a) r8 = openat$cgroup(r4, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f00000002c0), 0x2, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, 0x0, 0x1, {0x0, 0xff}}, 0x18) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0], 0x74}}, 0x0) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r11, 0x10c, 0x5, &(0x7f0000000000)=0x7, 0x4) 2m10.789713389s ago: executing program 34 (id=3545): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000140)={0x60, 0x31, 0x0, 0xb, 0x2, 0xce7, &(0x7f0000000100)="5bdd"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r7 = socket(0xa, 0x3, 0x3a) r8 = openat$cgroup(r4, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r8, &(0x7f00000002c0), 0x2, 0x0) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) bind$can_j1939(r7, &(0x7f0000000200)={0x1d, 0x0, 0x1, {0x0, 0xff}}, 0x18) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0], 0x74}}, 0x0) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r11, 0x10c, 0x5, &(0x7f0000000000)=0x7, 0x4) 1m52.844311105s ago: executing program 7 (id=3743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}}, 0x14}}, 0xffa1) 1m52.712061058s ago: executing program 7 (id=3745): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x7000000}, 0x48) 1m51.759901872s ago: executing program 7 (id=3747): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket(0x21, 0x3, 0x9) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r5 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/33, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x1b, r7, 0x1, 0xfc, 0x6, @local}, 0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mlock2(&(0x7f0000a6e000/0x1000)=nil, 0x1000, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) writev(r8, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 1m51.17251394s ago: executing program 7 (id=3760): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x8000, 0x5199b13398705b05) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x4000094) 1m50.871701099s ago: executing program 7 (id=3766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x290, 0x1b0, 0x290, 0x3a8, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'nicvf0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x800}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0xfffe], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x27}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x300}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x290, 0x1b0, 0x290, 0x3a8, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'nicvf0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff], [0xffffffff, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x3, 0x800}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0xfffe], [], 0xfd}}]}, @HL={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x27}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x300}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 1m50.001446145s ago: executing program 7 (id=3775): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000540)='0\xa7f\x99\xf9\xafcB\x11G3i\xb4yR$\xdf\xc5F\xe1\xd6\f\x91n\x85p\xf8\xad\xe7\fr\x02\xbd A\x85-\x89\xf1\xd9\xb9\xa8d\xa4\x8baP)\x99`\xf8\x89\x84s@^\xa9}\x05\x06+\xa7\xe7{\x8f\xa8\xea\xbd\xd5\xc1&R\x94\x1cP\xe1\xc9{\x03\xedWc\n\x1d\x1d\x8fG\xa73\x83l\x89_') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x55f, &(0x7f0000000c80)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x39}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af3650400010038001500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) 1m50.000082675s ago: executing program 35 (id=3775): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x45c) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000540)='0\xa7f\x99\xf9\xafcB\x11G3i\xb4yR$\xdf\xc5F\xe1\xd6\f\x91n\x85p\xf8\xad\xe7\fr\x02\xbd A\x85-\x89\xf1\xd9\xb9\xa8d\xa4\x8baP)\x99`\xf8\x89\x84s@^\xa9}\x05\x06+\xa7\xe7{\x8f\xa8\xea\xbd\xd5\xc1&R\x94\x1cP\xe1\xc9{\x03\xedWc\n\x1d\x1d\x8fG\xa73\x83l\x89_') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x55f, &(0x7f0000000c80)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x39}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af3650400010038001500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) 39.495815403s ago: executing program 5 (id=4796): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', 0x0}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009"], 0x7c}}, 0x8000) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000010000", @ANYBLOB="6027bde73bbedbfd0861d8abe468b6ed390643bdeab6d57c39d83d7bda84f41b15483b54da11ebd7faab9d8a4c5fbae34e24c05cab49f6b40f40331c820dddc3d7e51339e9ab7e93b303589571dcc1c800cc30e5c23a293d3329dac8049ea14c1a2bfaa30519a5aa537d80ec723777965e87c67033847ce9aa1858860da747f38395ef7e38370c80026ab99abed6e4bd92c2048d67de38d5713b15e0412e4ebfb9b45c5d8a24fc4afedba8715e5a94ba026a8b8fa05c2f9f4f90a07f958bd6bf4e74b9968e1d298acbea54c9145448dc11262684a942ad3da22361b36e307da249489473c57d1de73e72a960"], 0x110) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) syz_emit_ethernet(0x3e, &(0x7f0000000900)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) (async, rerun: 64) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000050000009f29390009000000000000070000cc2222069f26cc53ed8fa4ad95885bbce2d0220c0070d0b4d5dd072672822b7e4051184e4fc3dd6e01be512e1b73d70698955e55ef827a25d6cee8d285713d9669ca09e21f55d643ed8dbf7ff50feecfe0b0e8de4c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYRES8=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000840)=ANY=[@ANYRESDEC=r4, @ANYRES64=r6, @ANYRESOCT=r0, @ANYRES64=r4, @ANYRES32=r5, @ANYBLOB="d42807ea2d3deadf45eea40c8d721a95c229ed768de1ca42a3d8bfe28c9d234d8553f55ec19933a320ab5eba5eb54241f5559d4b4f63377e4947c6abf0891948d9bf7ec7ae99cccbaa097636fdb4", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x4, 0x6, 0x0, 0x544, 0x0, 0x9}) (async, rerun: 32) getrlimit(0x5, &(0x7f00000000c0)) (rerun: 32) getrlimit(0x7, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) (async) r8 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) (async) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (rerun: 32) 39.469472856s ago: executing program 5 (id=4799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd43, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "67d05c9b1a905b078aa0514c09fd714aee96b4761c7705dc48ee4dacf816aaf784413e096ca3464921940a1a3c7fe8dd56e11a111c31f5f2f21501d6acb4501e", 0x21}, 0x48, 0xfffffffffffffffd) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 38.221876269s ago: executing program 5 (id=4814): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x32, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x2a020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) ptrace$peekuser(0x3, r4, 0x7fffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x34f042, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x32, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) unshare(0x2a020400) (async) pipe(&(0x7f0000000140)) (async) close(r1) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) (async) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) (async) ptrace$peekuser(0x3, r4, 0x7fffffffffffffff) (async) open(&(0x7f00000000c0)='./file0\x00', 0x34f042, 0x4) (async) 38.011765879s ago: executing program 5 (id=4817): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) acct(0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000010000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414350000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000fdffffffffffffff04000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000073000000800000002abd700028bd7000000000004c001400636d616328616573290000000000"], 0x1a0}}, 0x0) 37.976811593s ago: executing program 5 (id=4819): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080008400000009c08000640fffffff905000100060000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b00000000050005000a"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffd, 0x8}}, './file0\x00'}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000100)=""/41) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 37.756575084s ago: executing program 5 (id=4822): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000080000"], 0x0, 0x28}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 23.383233059s ago: executing program 36 (id=4822): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000080000"], 0x0, 0x28}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 14.359385417s ago: executing program 9 (id=5117): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = socket$unix(0x1, 0x5, 0x0) pipe(0x0) (async) splice(r2, &(0x7f0000000180)=0xc9d4, 0xffffffffffffffff, 0x0, 0x1, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) (async) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"/396], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003e00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643c05d599dd26e10cc6e87b4e7818c9c89155a8e2e01d50bc3347475750472719cc516fa14b769cef385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da60f0000000000000000000006e7"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.02401902s ago: executing program 9 (id=5119): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4, 0xd10, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x20, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x480c0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 13.91837307s ago: executing program 9 (id=5120): r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000007000000181100003626534264cbcfc68f2b5758682906cec7ebd398b3a86af3b5d52fcb175971e3424743817b627c387f7438638f43ca32bdc6e176d7066bcd70332a60ba21bee1b4a3ae5573d0c207456eb7cef3d8e77bc5c8bde2ff5204ec0d9267798ca4c82dffcb3e4523", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) timer_create(0x3, &(0x7f0000000b80)={0x0, 0x3e, 0x5, @thr={0x0, &(0x7f0000000b40)="2933182e167230cfa8505d6f3628bc3ae95ffd70ca72a43004"}}, &(0x7f0000000cc0)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x8, &(0x7f0000000bc0)) syz_usbip_server_init(0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/169, 0xa9}, {0x0}], 0x2, 0xa3, 0x7) unshare(0xc040400) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 12.466358673s ago: executing program 9 (id=5130): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x44) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0xfffffffd, 0x80000000, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r7}]}]}, 0x28}}, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@nullb, r7, 0x0) 12.171619433s ago: executing program 9 (id=5131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='rss_stat\x00', r0, 0x0, 0x627d}, 0x18) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffff7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) write(r1, &(0x7f0000000280)="ee49757867c5dfeab770cf845c19f29af9fbc1d1cbca384027e330e5337614546f97aefeb18dbd3f5e57104348b45ca4a4a62f687ab93eec6259", 0x3a) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000800000001000000011000130200000006000000000000000300000000616130612e5f00"], &(0x7f0000001f40)=""/4079, 0x38, 0xfef, 0x8}, 0x28) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x1, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 11.467763992s ago: executing program 9 (id=5143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0xffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000000), &(0x7f0000000680)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703001100000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.443259984s ago: executing program 37 (id=5143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0xffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000000), &(0x7f0000000680)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703001100000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.458825542s ago: executing program 4 (id=5225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd43, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "67d05c9b1a905b078aa0514c09fd714aee96b4761c7705dc48ee4dacf816aaf784413e096ca3464921940a1a3c7fe8dd56e11a111c31f5f2f21501d6acb4501e", 0x21}, 0x48, 0xfffffffffffffffd) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 3.301493296s ago: executing program 0 (id=5228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}, 0x1, 0x0, 0x30000}, 0x0) 3.276325208s ago: executing program 0 (id=5229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.192503686s ago: executing program 0 (id=5230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, 0x0, 0x24000840) close_range(r1, r3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 2.755518739s ago: executing program 4 (id=5231): r0 = add_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="a0a3e1df436de5a4edeef070c1d754fc6c79403c29e6cf37db264460341ad001db64cfc82a39089e58d6df63", 0x2c, 0xfffffffffffffffc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000280)={r0}, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000140)=0x2f, 0x4) recvmmsg(r4, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) pwrite64(r3, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e32546", 0x5d, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xd, 0xb, 0xe, 0xf, 0xa, 0x8, 0xc, 0x7, 0xa, 0xf, 0x10, 0x4, 0xd, 0x4, 0x8, 0x4], 0x0, [0x6, 0xd, 0x81, 0x8bb4, 0x1, 0x400, 0x7, 0x4, 0x1, 0xfff, 0x3, 0x3ff, 0xc, 0x5c, 0x6700, 0xb0e], [0x800, 0x1, 0x375, 0xff84, 0xfffb, 0x9, 0x7, 0x4, 0x5, 0x7, 0xf08a, 0x1000, 0x8, 0x3, 0x124b, 0x7]}}}}]}, 0x88}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={r9, r10+60000000}, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x25, 0x0, 0x0, 0xfffffffd}, {0x25}, {0x16}]}) 2.433813361s ago: executing program 8 (id=5239): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20cc7, &(0x7f0000000940)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@noinit_itable}, {@noquota}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@delalloc}, {@lazytime}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@sb={'sb', 0x3d, 0x7fff}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x33, 0x37, 0x35, 0x66, 0x36, 0x37], 0x2d, [0x35, 0x38, 0x62, 0x2], 0x2d, [0x34, 0x34, 0x61, 0x32], 0x2d, [0x66, 0x34, 0x39, 0x32], 0x2d, [0x36, 0x64, 0x32, 0x39, 0x38, 0x61, 0x30, 0x63]}}}, {@uid_lt={'uid<', r0}}, {@euid_eq={'euid', 0x3d, r0}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f0c9a6d104dc27aab660a022190000006d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000036071ec2b3ffffffffffffff7f0000000000000000008b0800000000000000a0a6f439c7b35bf382b7298b1399ad5a0c987bf1bd3697efca4e128b3000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r3}, 0x10) socketpair(0xb, 0x6, 0x20, &(0x7f00000002c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00'}, 0x18) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x40) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_free\x00', r7}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x101301) 2.057830278s ago: executing program 8 (id=5243): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x240, 0x1a8, 0x460, 0x460, 0x240, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x7f}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x8, 0x1}}}, {{@ip={@remote, @remote, 0xff000000, 0xffffff00, 'pimreg1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x11, 0x4, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @loopback, 0xffffff00, 0xffffff00, 'bridge_slave_0\x00', 'macsec0\x00', {0x101}, {}, 0x11, 0x2, 0xc}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}, [0x0, 0xff, 0xff0000ff, 0xffffffff], @ipv4=@loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 0x2, 0x2, 0x32, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x200}, 0xc0, 0x102, 0x4e21, 0x4e21, 0x4e21, 0x4e21}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@remote, [0xff, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@mcast1, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv4=@broadcast, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x6, 0x3, 0x33, 0xfffa, 0x4e24, 0x4e23, 0x4e23, 0x44, 0x491}, 0x80, 0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x8}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x40, 0x4, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) (async) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f0000000300)={[], [{@seclabel}, {@euid_gt={'euid>', r1}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'rpfilter\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*.@'}}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") (async) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7c00, 0x0, 0x0) 2.025198471s ago: executing program 1 (id=5244): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08210340000000045c000000"], 0xe8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) r4 = syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d6664433bdb646e6f3dab011b515124f96a3095f7d6c5000037ebfcfa67640dea8951e1952c2ad6ba20680b7e9847f99c810c90ab868f2d0198ced55aa97e511f7d4470d750c75d7666c93816a934e1ce8a2fcdfe0702f3c3effb637d7653651756992cbdd1b5849b35ffc03cf5c0cf473c2700371e05384c7b0761710958ae0694a555a0564567cd0f3c642210ea2bc1c01b271d5f3d02b9bbc038da67461a857333216577aa4bff9d63c51e1cee40c305f0631797a48fb1e69ee21ba5fd4fc0b251fc7278eac6e6c95991c536949fa3cd8b4da17990cb66529b95f64c23c942995ccaf0239991cb1c989f0028c5e67c764bc3c63921810f6537be7df899be722099ee4e4125e73f902fdb8b34112a56ad86c64ba585cfab8a95a113f72a6323d4960261bc", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000340), &(0x7f0000000300)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) r11 = msgget$private(0x0, 0x0) msgsnd(r11, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) msgrcv(r11, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000040)) 1.947897039s ago: executing program 8 (id=5245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = io_uring_setup(0x54b8, &(0x7f0000000000)={0x0, 0x8eb2, 0x2, 0x2, 0xc0}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe75c, 0x400008], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r2, @ANYBLOB="a5a003f3b07cddbf834dbe535a945cd4ba1d3492f5dd9a4a0bfac55d4dfc092ed9d780324c2fb8b07cf6379dbde2013987311ee6065c14a2c70f364fd6", @ANYBLOB="b84498d901cbe0f72fa6ac112a081da171131b0af2e96f2a6277fe8f3530ddebd2969987c5f9767be2d07aa03055367e53f0735cf1e13358a2725673061afd1e202ab83a994d67392546e59e06eafceae007db5a5713ab8bb542d773966ee410d36760fa36f30222acb7870aee3864bc0f9374e70c7b522514ecc8ce40b1883349bd05836d9ec3f81b1c0c268885b4068ab74a4fcf6ac0af62773c87843750891c4a19ae4c12810c3ff3494e1b7c6aae95c1cf4d171d8987a7d1446ff71130c1632c72fb583683a623005bedd3b227d1ddaaedfb633e738a8c076b83aa8c5ee35810ab31c87e5adcdf7bfd"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='unmap\x00', r5, 0x0, 0x4}, 0x18) capget(&(0x7f0000000480)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000001180)=""/4096, 0x1000) 1.889800584s ago: executing program 0 (id=5246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='ext4_writepages\x00', r0}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x800003d, 0x7ff) write$P9_RSTATu(r3, &(0x7f0000000000)={0x7c, 0x7d, 0x1, {{0x0, 0x61, 0x7, 0x3, {0x1, 0x0, 0x1}, 0xa000000, 0x3ed, 0x10, 0x5, 0x13, 'cgroup.controllers\x00', 0x0, '', 0x13, 'cgroup.controllers\x00', 0x8, 'compress'}, 0x6, 'btrfs\x00'}}, 0x7c) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfefb}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) brk(0x9) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000340), &(0x7f0000000300)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x8, 0xffff, 0x2, 0xcd49}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1.806613043s ago: executing program 8 (id=5247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400002000000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x804) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2c) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00yO$']) 1.712220782s ago: executing program 4 (id=5248): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r1, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x6) 1.079761444s ago: executing program 1 (id=5249): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 1.078714374s ago: executing program 0 (id=5250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)={0x10, 0x70, 0x100000}, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8942, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x5ed, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 975.840354ms ago: executing program 1 (id=5252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 975.205164ms ago: executing program 4 (id=5253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x240c8080) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@multicast, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2, 0x300}, {@empty}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x12, "0001632a3a835e9504005d8b00000000"}, {0x0, 0x9, "4ef661e96b4014"}]}]}}}}}}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') read(r2, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101200, 0x10a) getuid() 878.171274ms ago: executing program 1 (id=5254): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019800800010008000000100001800c00"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854) pipe(0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000008000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a0000000088ffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 868.602935ms ago: executing program 0 (id=5255): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@noload}]}, 0x1, 0x5ec, &(0x7f0000001580)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893iLR5OXF0iUlhYwxLiArSEN/ogbN1ZaECnQ0BotmlAS3JgYN8aYuHIh/hdKZGdY6cqFG1eGhKhhaeKYO7237bR3Wlraucj9fJKh554zt+dcpt+eM6fn3AmgsobSf2oR+yNiJokYSBaWyuqRFQ4tPu/Bb++dTR9JNBov/ZJEkuXlz0+yr/3Zyb0R8d03SezrWlvv7Py1ixPT01NXs+ORuUszI7Pz1w5fuDRxfur81OWxZ8ZOHD92/MTokS1d1/WCvNM333x74IPxV7/47Pdk9Msfx5M4Gc9nT1x5HdtlKIaa/yfJ2qL+E9tdWUm6sp+TlS9xUi+xQWxK/vp1R8S/YiC6YvnFG4j3Xyi1ccCOaiQRDaCiEvEPFZWPA/L39qvfB9dKGZUAnXD/1OIEwNr4ry/ODUZvc25g94MkVk7rJBGxtZm5Vnsi4u6d8Zvn7ozfjB2ahwOKLdyIiH8XxX/SjP/B6I3BZvzXWuI/HRecyb6m+S9usf7VU8XiHzpnMf57143/aBP/r62I/9e3WP/QcvKNvpb479vqJQEAAAAAAEBl3T4VEU8X/f2/trT+JwrW//RHxMltqH9o1fHav//X7m1DNUCB+6cinitc/1vLV/8OdmWpvzXXA3Qn5y5MTx2JiL9HxKHo3pUej65Tx+EP933armwoW/+XP9L672ZrAbN23Kvvaj1ncmJu4lGvG4i4fyPiP4Xrf5Ol/j8p6P/T3wczD1nHvv/fOtOubOP4B3ZK4/OIg4X9//JdK5L1788x0hwPjOSjgrX+++5HX7Wrf6vx7xYT8OjS/n/3+vE/mKy8X8/s5us4Ol9vtCvb6vi/J3m5ecuZnizvnYm5uaujET3J6a40tyV/bPNthr+0Nsvn83jI4yWN/0P/W3/+r2j8n377hVXfO/m1dU9x7p9/9P/UrpnG/1CeNP4nN9X/bz4xdmvw63b1P1z/f6zZ1x/Kcsz/waJP8jDtac0vCMd6UVGn2wsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT4JaROyJpDa8lK7Vhocj+iPiH7G7Nn1ldu6pc1feujyZljU//7+Wf9LvwOJxkh7Xm+nl47FVx0cjYm9EfNzV1zwePntlerLsiwcAAAAAAAAAAAAAAAAAAIDHRH+b/f+pn7vKbh2w4+plNwAoTUH8f19GO4DO0/9DdRXE/7dltAPoPP0/VJf4h+oS/1Bd4h+qS/xDdYl/AAAAAAB4ouw9cPuHJCIWnu1rPlI9WVl3qS0Ddlqt7AYApXGLH6guS3+gurzHB5INynvbnrTRmeuZOfsIJwMAAAAAAAAAAABA5Rzcb/8/VJX9/1Bd9v9DdeX7/w+U3A6g87zHB2KDnfyF+/83PAsAAAAAAAAAAAAA2E6z89cuTkxPT12VeOXxaEYnE41G43r6U7AjVYxGRNkX2NlEvhT+cWnPqkS+1+/hzirvdxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDqzwAAAP//4pQjyw==") preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6ef8, 0x71c, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x400007}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={r3, r4/1000+10000}, 0x10) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r1}, 0xc) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000001180)='kfree\x00', r7, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) 733.961428ms ago: executing program 8 (id=5256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, 0x0, 0x24000840) close_range(r1, r3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@private=0xa010102, @empty}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 707.450521ms ago: executing program 1 (id=5257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=0x1, 0x7, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={0xffffffffffffffff, r3, 0xb, 0x0, @val=@netkit={@void, @value, @void, @void, r4}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x21, 0x10, 0xffffffffffffffff, @void, @value, @void, @void, r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c6b3bb691c5eed6f17d870b4c3ae15a019b0840b91fbdf22222f8fa5be12e1d944f0c0ff0fc414e1b89884d38817ae312f84d6a4d27d45c2e1611b5dbba84011aa5e46c339936be8ac785172655cadf4b2963a494e474151281368303b86330e773e2e27c27de4820a664527a34718f72b60e421d0e583c015348ad44675752f15416b71c9aa72f6811f6609775d24dc64eb1cd0a11f1b4aaca72b40606909dd9932e942c9fac4256538d5670"]) 492.779292ms ago: executing program 1 (id=5258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xd0}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x30, 0xc080}, 0x4060004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r7, 0x100c17a) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES32=r3, @ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRES64=r0, @ANYRES32=0x0], &(0x7f0000000880)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x2, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x74e, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x800, 0x0, 0x8000001000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e22}, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 411.91996ms ago: executing program 4 (id=5259): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f0000000080)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0, r3, 0x4000, r4}, 0x18) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x4002) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 227.703938ms ago: executing program 3 (id=5262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0xffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000000), &(0x7f0000000680)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 197.259211ms ago: executing program 3 (id=5263): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) 170.418214ms ago: executing program 3 (id=5264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 170.104254ms ago: executing program 3 (id=5265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 107.80121ms ago: executing program 3 (id=5266): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t') ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 92.985661ms ago: executing program 8 (id=5267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400ffef00000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x804) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2c) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00yO$']) 0s ago: executing program 3 (id=5268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) faccessat(r4, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 333.797324][ T29] audit: type=1326 audit(1760449608.436:13563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 333.821185][ T29] audit: type=1326 audit(1760449608.436:13564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 333.844829][ T29] audit: type=1326 audit(1760449608.436:13565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 333.953145][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4395'. [ 333.986860][T17259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4395'. [ 334.000753][T17259] bridge_slave_1: left allmulticast mode [ 334.006517][T17259] bridge_slave_1: left promiscuous mode [ 334.012279][T17259] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.053416][ T29] audit: type=1326 audit(1760449608.572:13566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 334.077273][ T29] audit: type=1326 audit(1760449608.572:13567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 334.100920][ T29] audit: type=1326 audit(1760449608.572:13568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 334.124686][ T29] audit: type=1326 audit(1760449608.583:13569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 334.148440][ T29] audit: type=1326 audit(1760449608.583:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17252 comm="syz.5.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab72ceec9 code=0x7ffc0000 [ 334.268257][T17259] bridge_slave_0: left allmulticast mode [ 334.275285][T17259] bridge_slave_0: left promiscuous mode [ 334.281111][T17259] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.347525][T17270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4399'. [ 334.383738][T17273] loop1: detected capacity change from 0 to 1024 [ 334.392627][T17273] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 334.403191][T17272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.441518][T17278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=17278 comm=syz.1.4402 [ 334.511424][T17287] can0: slcan on ttyS3. [ 334.552183][T17272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.571883][T17286] can0 (unregistered): slcan off ttyS3. [ 334.623281][T17272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.663552][T17304] loop1: detected capacity change from 0 to 1024 [ 334.670982][T17304] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 334.690310][T17295] pimreg: entered allmulticast mode [ 334.702769][T17295] pimreg: left allmulticast mode [ 334.798924][T17272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.855320][ T3713] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.923860][ T3713] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.235304][ T3713] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.235390][ T3713] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.246754][T17328] netlink: 'syz.8.4421': attribute type 10 has an invalid length. [ 336.250158][T17328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.252260][T17328] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 336.302148][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4422'. [ 336.597946][T17349] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 336.670109][T17364] loop5: detected capacity change from 0 to 128 [ 336.683516][T17362] loop3: detected capacity change from 0 to 512 [ 336.684181][T17362] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.684244][T17362] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.685162][T17364] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.685526][T17364] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 336.689899][T17362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.689922][T17362] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 336.711429][T17362] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.4431: Allocating blocks 41-42 which overlap fs metadata [ 336.711911][T17362] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.4431: Allocating blocks 41-42 which overlap fs metadata [ 336.712244][T17362] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4431: Failed to acquire dquot type 1 [ 336.712475][T17362] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 336.712544][T17362] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.4431: corrupted inode contents [ 336.712873][T17362] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #12: comm syz.3.4431: mark_inode_dirty error [ 336.713070][T17362] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.4431: corrupted inode contents [ 336.713271][T17362] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.4431: mark_inode_dirty error [ 336.713478][T17362] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.4431: corrupted inode contents [ 336.713692][T17362] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 336.713830][T17362] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #12: comm syz.3.4431: corrupted inode contents [ 336.715116][T17362] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.4431: mark_inode_dirty error [ 336.715314][T17362] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 336.715668][T17362] EXT4-fs (loop3): 1 truncate cleaned up [ 336.716162][T17362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.748079][T17362] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.4431: iget: bad i_size value: 360287970189639690 [ 336.835358][T17342] pimreg: entered allmulticast mode [ 336.858458][T16936] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.993179][T17342] pimreg: left allmulticast mode [ 337.205083][T17386] ip6gre2: entered allmulticast mode [ 337.600799][T17399] netlink: 'syz.4.4443': attribute type 4 has an invalid length. [ 337.770668][T13284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.860962][T17410] loop5: detected capacity change from 0 to 128 [ 337.898980][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 337.916815][T17406] loop1: detected capacity change from 0 to 8192 [ 338.031105][T17406] loop1: p2 p3 p4[EZD] [ 338.044780][T17406] loop1: p3 start 360447 is beyond EOD, truncated [ 338.051427][T17406] loop1: p4 size 264072 extends beyond EOD, truncated [ 338.214734][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 338.236436][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 338.279734][T17436] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4455'. [ 338.307450][T17426] pimreg: entered allmulticast mode [ 338.324075][T17426] pimreg: left allmulticast mode [ 338.559121][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 338.559137][ T29] audit: type=1326 audit(1760449613.496:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.570040][T17458] loop5: detected capacity change from 0 to 1024 [ 338.598889][T17458] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 338.617756][ T29] audit: type=1326 audit(1760449613.528:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.641566][ T29] audit: type=1326 audit(1760449613.538:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.665403][ T29] audit: type=1326 audit(1760449613.538:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.689032][ T29] audit: type=1326 audit(1760449613.538:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.712715][ T29] audit: type=1326 audit(1760449613.538:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.736414][ T29] audit: type=1326 audit(1760449613.538:13737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.760119][ T29] audit: type=1326 audit(1760449613.538:13738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.783944][ T29] audit: type=1326 audit(1760449613.538:13739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.807727][ T29] audit: type=1326 audit(1760449613.538:13740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.8.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 338.813127][T17464] netlink: 208036 bytes leftover after parsing attributes in process `syz.1.4467'. [ 338.840777][T17464] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 338.869916][T17462] rdma_op ffff888102afb180 conn xmit_rdma 0000000000000000 [ 338.882505][T17469] sit0: entered allmulticast mode [ 338.895387][T17472] loop9: detected capacity change from 0 to 7 [ 338.895647][T17472] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.895946][T17472] Buffer I/O error on dev loop9, logical block 0, async page read [ 338.895967][T17472] loop9: unable to read partition table [ 338.896023][T17472] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 338.896023][T17472] ) failed (rc=-5) [ 338.901790][T17469] sit0: left allmulticast mode [ 338.948007][T17480] loop8: detected capacity change from 0 to 128 [ 338.960151][T17480] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.968829][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4468'. [ 338.968861][T17480] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.035359][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4473'. [ 339.138049][T15355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.285390][T17502] pimreg: entered allmulticast mode [ 339.286286][T17505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17505 comm=syz.1.4480 [ 339.291564][T17502] pimreg: left allmulticast mode [ 339.357058][T17505] loop1: detected capacity change from 0 to 128 [ 339.357521][T17505] vfat: Unknown parameter 'n7iV3_ء5 TJr@ [ 339.357521][T17505] c-:y$p' [ 339.731678][T17518] loop3: detected capacity change from 0 to 1024 [ 339.744878][T17518] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 339.782934][T17524] loop9: detected capacity change from 0 to 7 [ 339.789700][T17524] Buffer I/O error on dev loop9, logical block 0, async page read [ 339.805167][T17524] Buffer I/O error on dev loop9, logical block 0, async page read [ 339.813116][T17524] loop9: unable to read partition table [ 339.818918][T17524] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 339.818918][T17524] ) failed (rc=-5) [ 339.976391][T17537] pimreg: entered allmulticast mode [ 339.991616][T17537] pimreg: left allmulticast mode [ 340.055962][T17539] loop5: detected capacity change from 0 to 128 [ 340.063884][T17539] ext4: Unknown parameter 'obj_role' [ 340.286235][T17557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'. [ 340.290852][T17553] process '/newroot/371/file0' started with executable stack [ 340.420239][T17564] loop8: detected capacity change from 0 to 1024 [ 340.436932][T17564] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 342.187638][T17586] loop8: detected capacity change from 0 to 512 [ 342.215086][T17588] FAULT_INJECTION: forcing a failure. [ 342.215086][T17588] name failslab, interval 1, probability 0, space 0, times 0 [ 342.227942][T17588] CPU: 0 UID: 0 PID: 17588 Comm: syz.8.4510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 342.228026][T17588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.228043][T17588] Call Trace: [ 342.228052][T17588] [ 342.228062][T17588] __dump_stack+0x1d/0x30 [ 342.228090][T17588] dump_stack_lvl+0xe8/0x140 [ 342.228110][T17588] dump_stack+0x15/0x1b [ 342.228195][T17588] should_fail_ex+0x265/0x280 [ 342.228262][T17588] should_failslab+0x8c/0xb0 [ 342.228290][T17588] kmem_cache_alloc_noprof+0x50/0x480 [ 342.228348][T17588] ? audit_log_start+0x342/0x720 [ 342.228376][T17588] audit_log_start+0x342/0x720 [ 342.228402][T17588] ? kstrtouint+0x76/0xc0 [ 342.228528][T17588] audit_seccomp+0x48/0x100 [ 342.228567][T17588] ? __seccomp_filter+0x82d/0x1250 [ 342.228600][T17588] __seccomp_filter+0x83e/0x1250 [ 342.228655][T17588] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 342.228761][T17588] ? vfs_write+0x7e8/0x960 [ 342.228943][T17588] __secure_computing+0x82/0x150 [ 342.228979][T17588] syscall_trace_enter+0xcf/0x1e0 [ 342.229060][T17588] do_syscall_64+0xac/0x200 [ 342.229084][T17588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 342.229127][T17588] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 342.229158][T17588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.229188][T17588] RIP: 0033:0x7fee971aeec9 [ 342.229217][T17588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.229276][T17588] RSP: 002b:00007fee95c0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 342.229298][T17588] RAX: ffffffffffffffda RBX: 00007fee97405fa0 RCX: 00007fee971aeec9 [ 342.229314][T17588] RDX: 0000000000000000 RSI: fffffffffffff206 RDI: 0000000000000000 [ 342.229385][T17588] RBP: 00007fee95c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 342.229415][T17588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.229432][T17588] R13: 00007fee97406038 R14: 00007fee97405fa0 R15: 00007ffeec99dbd8 [ 342.229457][T17588] [ 342.453977][T17594] veth0_to_bridge: entered promiscuous mode [ 342.484340][T17593] veth0_to_bridge: left promiscuous mode [ 342.558522][T17592] pimreg: entered allmulticast mode [ 342.574327][T17592] pimreg: left allmulticast mode [ 342.603984][T17609] tipc: Enabling of bearer rejected, failed to enable media [ 342.619468][T17611] loop3: detected capacity change from 0 to 128 [ 342.639095][T17611] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.658526][T17611] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.715393][T17609] wireguard0: entered promiscuous mode [ 342.720956][T17609] wireguard0: entered allmulticast mode [ 342.743158][T13284] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.774344][T17624] SELinux: failed to load policy [ 342.788072][T17624] loop1: detected capacity change from 0 to 128 [ 342.928453][T17624] netlink: 'syz.1.4523': attribute type 3 has an invalid length. [ 343.116884][T17656] loop1: detected capacity change from 0 to 128 [ 343.135161][T17656] vfat: Unknown parameter '' [ 343.150920][T17656] loop1: detected capacity change from 0 to 512 [ 343.158924][T17656] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 343.171200][T17656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4537: bg 0: block 104: invalid block bitmap [ 343.195951][T17656] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 343.206137][T17656] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4537: invalid indirect mapped block 1 (level 1) [ 343.220958][T17656] EXT4-fs (loop1): 1 truncate cleaned up [ 343.227244][T17656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.277552][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.430863][T17682] loop1: detected capacity change from 0 to 512 [ 343.435634][T17674] pimreg: entered allmulticast mode [ 343.455516][T17674] pimreg: left allmulticast mode [ 343.469465][T17682] __quota_error: 60 callbacks suppressed [ 343.469484][T17682] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 343.518539][T17682] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.541530][T17682] EXT4-fs (loop1): mount failed [ 343.619086][T17691] loop1: detected capacity change from 0 to 512 [ 343.657001][T17691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.703171][T17691] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.4549: invalid block [ 343.737090][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 343.750874][T17699] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 343.751819][ T29] audit: type=1400 audit(2000000003.789:13799): avc: denied { relabelfrom } for pid=17698 comm="syz.4.4553" name="UDPv6" dev="sockfs" ino=55139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 343.762338][T17691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4549: invalid indirect mapped block 4294967295 (level 1) [ 343.789460][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811a844c00: rx timeout, send abort [ 343.799573][T17691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4549: invalid indirect mapped block 4294967295 (level 1) [ 343.807054][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a844c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.834414][T17691] EXT4-fs (loop1): 2 truncates cleaned up [ 343.840814][T17691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.853473][ T29] audit: type=1400 audit(2000000003.810:13800): avc: denied { relabelto } for pid=17698 comm="syz.4.4553" name="UDPv6" dev="sockfs" ino=55139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:updpwd_exec_t:s0" [ 343.891807][T17691] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.4549: path /342/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 343.918412][T17704] loop8: detected capacity change from 0 to 128 [ 343.928209][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.948213][T17704] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.976829][T17704] ext4 filesystem being mounted at /159/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.050261][ T29] audit: type=1326 audit(2000000004.104:13801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 344.074143][ T29] audit: type=1326 audit(2000000004.104:13802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 344.097838][ T29] audit: type=1326 audit(2000000004.104:13803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 344.121922][ T29] audit: type=1326 audit(2000000004.104:13804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 344.145620][ T29] audit: type=1326 audit(2000000004.104:13805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17707 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 344.291374][T15355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.355810][T17727] netlink: 'syz.8.4564': attribute type 1 has an invalid length. [ 344.358900][ T29] audit: type=1400 audit(2000000004.430:13806): avc: denied { audit_write } for pid=17726 comm="syz.8.4564" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 344.363862][T17727] netlink: 'syz.8.4564': attribute type 2 has an invalid length. [ 344.385063][ T29] audit: type=1107 audit(2000000004.430:13807): pid=17726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaa' [ 344.628333][T17717] pimreg: entered allmulticast mode [ 344.640130][T17717] pimreg: left allmulticast mode [ 344.895017][T17796] loop3: detected capacity change from 0 to 512 [ 344.908392][T17796] ------------[ cut here ]------------ [ 344.913935][T17796] EA inode 11 i_nlink=2 [ 344.914233][T17796] WARNING: CPU: 1 PID: 17796 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 344.928692][T17796] Modules linked in: [ 344.932685][T17796] CPU: 1 UID: 0 PID: 17796 Comm: syz.3.4583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 344.942549][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.952654][T17796] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 344.959374][T17796] Code: 90 49 8d 7e 40 e8 66 01 b9 ff 4d 8b 6e 40 4c 89 e7 e8 7a fc b8 ff 41 8b 56 48 48 c7 c7 b2 4d 55 86 4c 89 ee e8 c7 08 68 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 77 b0 03 0f 1f 84 00 00 00 00 00 [ 344.979039][T17796] RSP: 0018:ffffc900001c3778 EFLAGS: 00010246 [ 344.985216][T17796] RAX: dd45dc0a1b60a100 RBX: ffff88813153a010 RCX: ffff88811a763180 [ 344.993249][T17796] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 345.001257][T17796] RBP: 0000000000000002 R08: 0001c900001c35f7 R09: 0000000000000000 [ 345.009297][T17796] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888131539fc0 [ 345.017345][T17796] R13: 000000000000000b R14: ffff888131539f78 R15: 0000000000000001 [ 345.025382][T17796] FS: 00007efe81d1f6c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 345.034412][T17796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.041061][T17796] CR2: 000000110c274b57 CR3: 00000001394a0000 CR4: 00000000003506f0 [ 345.049098][T17796] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 345.057273][T17796] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 345.065434][T17796] Call Trace: [ 345.068980][T17796] [ 345.071947][T17796] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 345.077917][T17796] ? errseq_check+0x2c/0x50 [ 345.082466][T17796] ext4_xattr_delete_inode+0x6b7/0x790 [ 345.088011][T17796] ext4_evict_inode+0xa6a/0xd90 [ 345.092917][T17796] ? __pfx_ext4_evict_inode+0x10/0x10 [ 345.098396][T17796] evict+0x2e3/0x550 [ 345.102408][T17796] ? __dquot_initialize+0x146/0x7c0 [ 345.108026][T17796] iput+0x4ed/0x650 [ 345.112183][T17796] ext4_process_orphan+0x1a9/0x1c0 [ 345.117372][T17796] ext4_orphan_cleanup+0x6a8/0xa00 [ 345.122524][T17796] ext4_fill_super+0x3483/0x3810 [ 345.127525][T17796] ? snprintf+0x86/0xb0 [ 345.131780][T17796] ? set_blocksize+0x1a8/0x310 [ 345.136697][T17796] ? sb_set_blocksize+0xe3/0x100 [ 345.141669][T17796] ? setup_bdev_super+0x30e/0x370 [ 345.146876][T17796] ? __pfx_ext4_fill_super+0x10/0x10 [ 345.152253][T17796] get_tree_bdev_flags+0x291/0x300 [ 345.157448][T17796] ? __pfx_ext4_fill_super+0x10/0x10 [ 345.162797][T17796] get_tree_bdev+0x1f/0x30 [ 345.167291][T17796] ext4_get_tree+0x1c/0x30 [ 345.171750][T17796] vfs_get_tree+0x57/0x1d0 [ 345.176257][T17796] do_new_mount+0x24d/0x660 [ 345.180853][T17796] path_mount+0x4a5/0xb70 [ 345.185313][T17796] ? user_path_at+0x109/0x130 [ 345.190054][T17796] __se_sys_mount+0x28c/0x2e0 [ 345.194900][T17796] __x64_sys_mount+0x67/0x80 [ 345.199613][T17796] x64_sys_call+0x2b51/0x3000 [ 345.204376][T17796] do_syscall_64+0xd2/0x200 [ 345.208921][T17796] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 345.215208][T17796] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 345.221167][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.227278][T17796] RIP: 0033:0x7efe832c066a [ 345.231780][T17796] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.251723][T17796] RSP: 002b:00007efe81d1ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.260222][T17796] RAX: ffffffffffffffda RBX: 00007efe81d1eef0 RCX: 00007efe832c066a [ 345.268597][T17796] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007efe81d1eeb0 [ 345.276678][T17796] RBP: 0000200000000180 R08: 00007efe81d1eef0 R09: 0000000000800700 [ 345.284892][T17796] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 345.292968][T17796] R13: 00007efe81d1eeb0 R14: 000000000000046c R15: 0000200000000740 [ 345.301062][T17796] [ 345.304099][T17796] ---[ end trace 0000000000000000 ]--- [ 345.312135][T17796] EXT4-fs (loop3): 1 orphan inode deleted [ 345.318733][T17796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.408826][T17821] loop5: detected capacity change from 0 to 128 [ 345.431710][T13284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.501142][T17835] loop8: detected capacity change from 0 to 512 [ 345.517987][T17835] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4595: casefold flag without casefold feature [ 345.533237][T17833] loop1: detected capacity change from 0 to 164 [ 345.534296][T17835] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4595: couldn't read orphan inode 15 (err -117) [ 345.561934][T17835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.593511][T17835] Invalid ELF header magic: != ELF [ 345.599209][T17841] bond1 (unregistering): Released all slaves [ 345.619537][T17835] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.646694][T17848] loop5: detected capacity change from 0 to 512 [ 345.668822][T17848] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4596: casefold flag without casefold feature [ 345.705776][T17848] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4596: couldn't read orphan inode 15 (err -117) [ 345.707533][T17835] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.734148][T17848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.829843][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4601'. [ 345.841496][T17848] macvtap1: entered promiscuous mode [ 345.846860][T17848] macvtap1: entered allmulticast mode [ 345.852782][T17848] dummy0: entered promiscuous mode [ 345.863201][T17848] dummy0: entered allmulticast mode [ 345.869561][T17848] team0: Device macvtap1 failed to register rx_handler [ 345.880604][T17848] dummy0: left allmulticast mode [ 345.885763][T17848] dummy0: left promiscuous mode [ 345.900387][T17835] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.990657][T17835] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.099065][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.118881][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.137019][T17865] pimreg: entered allmulticast mode [ 346.168781][T17865] pimreg: left allmulticast mode [ 346.189601][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.200795][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.244169][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.420584][T16936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.635608][T17897] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4613'. [ 346.658904][T17897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4613'. [ 346.710910][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4614'. [ 347.389905][T17905] vhci_hcd: invalid port number 12 [ 347.407321][T17905] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4609'. [ 347.459173][T17905] vlan2: entered allmulticast mode [ 347.464480][T17905] erspan0: entered allmulticast mode [ 347.586186][T17916] loop5: detected capacity change from 0 to 128 [ 347.596146][T17916] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.608765][T17916] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.644040][T17919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4620'. [ 347.707299][T17923] loop8: detected capacity change from 0 to 1024 [ 347.753843][T17923] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 347.768136][T16936] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.835614][T17933] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.4627'. [ 347.912411][T17921] pimreg: entered allmulticast mode [ 347.919073][T17921] pimreg: left allmulticast mode [ 348.019502][T17951] netlink: 'syz.1.4634': attribute type 10 has an invalid length. [ 348.020248][T17951] bond0: (slave dummy0): Releasing backup interface [ 348.061140][T17951] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.088357][T17951] team0: Failed to send options change via netlink (err -105) [ 348.088385][T17951] team0: Port device dummy0 added [ 348.088733][T17959] netlink: 'syz.1.4634': attribute type 10 has an invalid length. [ 348.089210][T17959] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.091824][T17951] netlink: 'syz.1.4634': attribute type 10 has an invalid length. [ 348.093321][T17959] team0: Failed to send options change via netlink (err -105) [ 348.093459][T17959] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 348.093643][T17959] team0: Port device dummy0 removed [ 348.095401][T17959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 348.098256][T17956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4633'. [ 348.175115][T17964] loop8: detected capacity change from 0 to 128 [ 348.193610][T17964] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.209150][T17964] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 348.290195][T15355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.315548][T17974] loop8: detected capacity change from 0 to 1024 [ 348.318422][T17974] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 348.427663][T17978] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.471572][T17978] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.476714][T17981] loop8: detected capacity change from 0 to 1024 [ 348.483355][T17981] __quota_error: 1081 callbacks suppressed [ 348.483447][T17981] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 348.483524][T17981] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 348.483620][T17981] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.4642: Failed to acquire dquot type 0 [ 348.484007][T17981] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 348.484158][T17981] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #13: comm syz.8.4642: corrupted inode contents [ 348.484477][T17981] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #13: comm syz.8.4642: mark_inode_dirty error [ 348.485396][T17981] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #13: comm syz.8.4642: corrupted inode contents [ 348.485527][T17981] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4642: mark_inode_dirty error [ 348.485736][T17981] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #13: comm syz.8.4642: corrupted inode contents [ 348.485934][T17981] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 348.486105][T17981] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #13: comm syz.8.4642: corrupted inode contents [ 348.486322][T17981] EXT4-fs error (device loop8): ext4_truncate:4637: inode #13: comm syz.8.4642: mark_inode_dirty error [ 348.486619][T17981] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 348.486990][T17981] EXT4-fs (loop8): 1 truncate cleaned up [ 348.504127][T17981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.520514][T17985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17985 comm=syz.4.4644 [ 348.520655][T17978] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.548199][T17978] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.931509][ T29] audit: type=1326 audit(2000000009.217:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17993 comm="syz.4.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 348.931560][ T29] audit: type=1326 audit(2000000009.227:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17993 comm="syz.4.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 349.057402][T17998] pimreg: entered allmulticast mode [ 349.062779][T17998] pimreg: left allmulticast mode [ 349.244861][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4651'. [ 349.244892][T18011] tipc: Started in network mode [ 349.244905][T18011] tipc: Node identity 7, cluster identity 4711 [ 349.244919][T18011] tipc: Node number set to 7 [ 349.245413][T18011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4651'. [ 349.245484][T18011] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4651'. [ 349.343138][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4652'. [ 349.409707][T18015] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 349.950953][T18031] loop9: detected capacity change from 0 to 7 [ 350.066342][T18031] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.096325][T18037] netlink: 'syz.4.4658': attribute type 21 has an invalid length. [ 350.110728][T18031] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.118780][T18031] loop9: unable to read partition table [ 350.138203][T18038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18038 comm=syz.1.4659 [ 350.150849][T18038] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18038 comm=syz.1.4659 [ 350.183742][T18031] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 350.183742][T18031] ) failed (rc=-5) [ 350.342036][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4659'. [ 350.383093][ T3713] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.423620][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.439385][T18047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4662'. [ 350.452743][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.472963][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.482409][ T29] audit: type=1326 audit(356.649:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 350.509349][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.510861][ T29] audit: type=1326 audit(356.681:14892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 350.541448][ T29] audit: type=1326 audit(356.681:14893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 350.564575][ T29] audit: type=1326 audit(356.681:14894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 350.587831][ T29] audit: type=1326 audit(356.681:14895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 350.610892][ T29] audit: type=1326 audit(356.681:14896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18046 comm="syz.1.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 350.781419][T18071] sd 0:0:1:0: device reset [ 350.962294][T18087] loop1: detected capacity change from 0 to 512 [ 350.973354][T18090] loop9: detected capacity change from 0 to 7 [ 350.979827][T18090] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.987788][T18090] Buffer I/O error on dev loop9, logical block 0, async page read [ 350.995691][T18090] loop9: unable to read partition table [ 351.001532][T18090] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 351.001532][T18090] ) failed (rc=-5) [ 351.113564][T18093] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.113564][T18093] program syz.5.4678 not setting count and/or reply_len properly [ 351.204334][T18087] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 351.261024][T18087] EXT4-fs (loop1): mount failed [ 351.713264][T18109] loop5: detected capacity change from 0 to 1024 [ 351.739910][T18109] EXT4-fs: Ignoring removed orlov option [ 351.759581][T18109] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 351.804455][T18109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.860538][T18109] ext4: Unknown parameter '' [ 351.865770][T18109] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 351.939159][T16936] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.457180][T18118] pimreg: entered allmulticast mode [ 352.482051][T18118] pimreg: left allmulticast mode [ 352.864604][T18144] loop5: detected capacity change from 0 to 128 [ 354.482983][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 354.482998][ T29] audit: type=1326 audit(360.859:14970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.597098][ T29] audit: type=1326 audit(360.891:14971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.620176][ T29] audit: type=1326 audit(360.891:14972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.643463][ T29] audit: type=1326 audit(360.891:14973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.666677][ T29] audit: type=1326 audit(360.891:14974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.690052][ T29] audit: type=1326 audit(360.891:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.713130][ T29] audit: type=1326 audit(360.891:14976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.736280][ T29] audit: type=1326 audit(360.891:14977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.759142][ T29] audit: type=1326 audit(360.891:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.782155][ T29] audit: type=1326 audit(360.891:14979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18171 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 354.819133][T18187] bond1: option miimon: invalid value (18446744073709551615) [ 354.826725][T18187] bond1: option miimon: allowed values 0 - 2147483647 [ 354.989558][T18200] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4700'. [ 355.001187][T18187] bond1 (unregistering): Released all slaves [ 355.496037][T18223] netlink: 'syz.3.4716': attribute type 21 has an invalid length. [ 356.190512][T18259] netlink: 'syz.1.4726': attribute type 21 has an invalid length. [ 356.272598][T18259] loop1: detected capacity change from 0 to 128 [ 356.306917][T18259] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.321209][T18268] loop8: detected capacity change from 0 to 512 [ 356.465070][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 356.733897][T18266] pimreg: entered allmulticast mode [ 356.756657][T18266] pimreg: left allmulticast mode [ 356.919938][T18283] loop9: detected capacity change from 0 to 7 [ 356.926229][T18283] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.955679][T18283] Buffer I/O error on dev loop9, logical block 0, async page read [ 356.963651][T18283] loop9: unable to read partition table [ 356.978713][T18283] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 356.978713][T18283] ) failed (rc=-5) [ 358.701325][T18313] ip6t_srh: unknown srh match flags 4000 [ 358.771346][T18317] x_tables: duplicate underflow at hook 1 [ 358.859697][T18331] netlink: 'syz.5.4750': attribute type 21 has an invalid length. [ 358.871557][T18331] loop5: detected capacity change from 0 to 128 [ 358.897305][T18331] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.924648][T18333] netlink: 'syz.4.4751': attribute type 21 has an invalid length. [ 358.949976][T16936] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.121988][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4760'. [ 359.377923][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4765'. [ 359.896984][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4768'. [ 359.990329][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 359.990346][ T29] audit: type=1326 audit(366.612:15131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.019868][ T29] audit: type=1326 audit(366.612:15132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="syz.3.4770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.042913][ T29] audit: type=1326 audit(366.612:15133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.065731][ T29] audit: type=1326 audit(366.612:15134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.088291][ T29] audit: type=1326 audit(366.612:15135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.110835][ T29] audit: type=1326 audit(366.612:15136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.133327][ T29] audit: type=1326 audit(366.623:15137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.155871][ T29] audit: type=1326 audit(366.623:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.178386][ T29] audit: type=1326 audit(366.623:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.196747][T18397] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4773'. [ 360.200867][ T29] audit: type=1326 audit(366.623:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18388 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe832beec9 code=0x7ffc0000 [ 360.223206][T18396] loop1: detected capacity change from 0 to 1024 [ 360.243035][T18398] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4773'. [ 360.254647][T18396] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 360.303513][T18400] loop1: detected capacity change from 0 to 128 [ 360.321101][T18400] syz.1.4774: attempt to access beyond end of device [ 360.321101][T18400] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 360.343276][T18400] syz.1.4774: attempt to access beyond end of device [ 360.343276][T18400] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 360.387717][T18400] syz.1.4774: attempt to access beyond end of device [ 360.387717][T18400] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 360.405328][T18407] netlink: 'syz.5.4777': attribute type 21 has an invalid length. [ 360.422422][T18400] syz.1.4774: attempt to access beyond end of device [ 360.422422][T18400] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 360.436437][T18400] syz.1.4774: attempt to access beyond end of device [ 360.436437][T18400] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 360.461060][T18407] loop5: detected capacity change from 0 to 128 [ 360.478990][T18400] syz.1.4774: attempt to access beyond end of device [ 360.478990][T18400] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 360.479955][T18407] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.527914][T18400] syz.1.4774: attempt to access beyond end of device [ 360.527914][T18400] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 360.541842][T18420] netlink: 'syz.1.4774': attribute type 16 has an invalid length. [ 360.549816][T18420] netlink: 'syz.1.4774': attribute type 17 has an invalid length. [ 360.557151][T18400] syz.1.4774: attempt to access beyond end of device [ 360.557151][T18400] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 360.665504][T16936] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.682008][T18400] syz.1.4774: attempt to access beyond end of device [ 360.682008][T18400] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 360.705618][T18400] syz.1.4774: attempt to access beyond end of device [ 360.705618][T18400] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 361.760560][T18423] pimreg: entered allmulticast mode [ 361.766568][T18423] pimreg: left allmulticast mode [ 361.890974][T18448] loop1: detected capacity change from 0 to 512 [ 361.934703][T18448] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 361.949891][T18453] netlink: 'syz.3.4791': attribute type 21 has an invalid length. [ 362.017405][T18448] EXT4-fs (loop1): 1 truncate cleaned up [ 362.045086][T18448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.126546][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.692251][T18492] pimreg: entered allmulticast mode [ 362.706328][T18501] loop1: detected capacity change from 0 to 512 [ 362.756094][T18501] EXT4-fs: Ignoring removed bh option [ 362.870374][T18501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.952088][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4807'. [ 363.062843][T18507] cgroup: name respecified [ 363.130534][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.204966][T18512] pimreg: left allmulticast mode [ 363.309279][T18516] loop8: detected capacity change from 0 to 512 [ 363.464598][T18529] loop1: detected capacity change from 0 to 1024 [ 363.500493][T18529] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 363.606174][T18542] sd 0:0:1:0: device reset [ 363.765200][T18551] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 364.101155][T18558] loop1: detected capacity change from 0 to 512 [ 364.126994][T18558] EXT4-fs: Ignoring removed oldalloc option [ 364.148566][T18558] EXT4-fs (loop1): 1 truncate cleaned up [ 364.174677][T18558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.264308][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.371674][T18563] loop9: detected capacity change from 0 to 7 [ 364.399899][T18563] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.421028][T18563] Buffer I/O error on dev loop9, logical block 0, async page read [ 364.429095][T18563] loop9: unable to read partition table [ 364.453043][T18563] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 364.453043][T18563] ) failed (rc=-5) [ 364.543039][T18574] loop1: detected capacity change from 0 to 1024 [ 364.570222][T18574] EXT4-fs: Ignoring removed orlov option [ 364.586505][T18574] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 364.625898][T18574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.682510][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.758668][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 364.758684][ T29] audit: type=1326 audit(371.641:15589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc678c8af79 code=0x7ffc0000 [ 364.787985][ T29] audit: type=1326 audit(371.641:15590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc678ce5d67 code=0x7ffc0000 [ 364.810899][ T29] audit: type=1326 audit(371.641:15591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc678c8af79 code=0x7ffc0000 [ 364.833995][ T29] audit: type=1326 audit(371.641:15592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 364.857118][ T29] audit: type=1326 audit(371.641:15593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc678ce5d67 code=0x7ffc0000 [ 364.880028][ T29] audit: type=1326 audit(371.641:15594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc678c8af79 code=0x7ffc0000 [ 364.902998][ T29] audit: type=1326 audit(371.641:15595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 364.968657][ T29] audit: type=1326 audit(371.704:15596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc678ce5d67 code=0x7ffc0000 [ 364.991692][ T29] audit: type=1326 audit(371.704:15597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc678c8af79 code=0x7ffc0000 [ 365.014690][ T29] audit: type=1326 audit(371.704:15598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.4.4831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc678ce5d67 code=0x7ffc0000 [ 365.046294][T18588] loop1: detected capacity change from 0 to 128 [ 365.074913][T18588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.117913][T18591] loop8: detected capacity change from 0 to 1024 [ 365.144059][T18591] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 365.169308][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.354220][T18605] sd 0:0:1:0: device reset [ 365.524633][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4844'. [ 365.784341][T18620] loop1: detected capacity change from 0 to 128 [ 365.794740][T18620] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.938001][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.088335][T18628] loop1: detected capacity change from 0 to 1024 [ 366.093742][T18628] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 366.614680][T18649] netlink: 'syz.3.4856': attribute type 1 has an invalid length. [ 366.665433][T18649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.665615][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4856'. [ 366.720932][T18651] bond1 (unregistering): Released all slaves [ 366.838813][T18644] pimreg: entered allmulticast mode [ 366.845097][T18644] pimreg: left allmulticast mode [ 366.960405][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4859'. [ 367.171781][T18668] SELinux: failed to load policy [ 367.206503][T18668] loop1: detected capacity change from 0 to 2048 [ 367.247214][T18668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.387887][T18679] sd 0:0:1:0: device reset [ 367.558932][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.986114][T18724] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:49152 [ 369.010883][T18726] sd 0:0:1:0: device reset [ 369.161982][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4878'. [ 369.227533][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4886'. [ 369.256213][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4886'. [ 369.505972][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4894'. [ 369.536595][T18767] loop8: detected capacity change from 0 to 2048 [ 369.587815][T18767] Alternate GPT is invalid, using primary GPT. [ 369.594246][T18767] loop8: p1 p2 p3 [ 369.608607][T18762] 8021q: adding VLAN 0 to HW filter on device  [ 369.621350][ T29] kauditd_printk_skb: 1471 callbacks suppressed [ 369.621365][ T29] audit: type=1400 audit(376.743:17070): avc: denied { create } for pid=18761 comm="syz.3.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 369.729188][ T29] audit: type=1400 audit(376.858:17071): avc: denied { create } for pid=18774 comm="syz.3.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 369.795071][ T29] audit: type=1326 audit(376.921:17072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.8.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 369.818375][ T29] audit: type=1326 audit(376.921:17073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.8.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 369.848906][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4896'. [ 369.915222][ T29] audit: type=1400 audit(376.953:17074): avc: denied { name_bind } for pid=18784 comm="syz.3.4900" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 369.936763][ T29] audit: type=1400 audit(376.953:17075): avc: denied { node_bind } for pid=18784 comm="syz.3.4900" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 369.957998][ T29] audit: type=1326 audit(376.984:17076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.8.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 369.981008][ T29] audit: type=1326 audit(376.984:17077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.8.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 370.004042][ T29] audit: type=1326 audit(376.984:17078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.8.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 370.027287][ T29] audit: type=1326 audit(376.984:17079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18777 comm="syz.8.4896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 370.242224][T18793] loop8: detected capacity change from 0 to 256 [ 370.362315][T18797] loop8: detected capacity change from 0 to 2048 [ 370.459060][T18797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.577228][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.753916][T18826] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.4917'. [ 370.758680][T18829] loop1: detected capacity change from 0 to 128 [ 370.776346][T18829] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.796025][T18824] loop9: detected capacity change from 0 to 7 [ 370.812038][T18824] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.821432][T18824] Buffer I/O error on dev loop9, logical block 0, async page read [ 370.822128][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.829323][T18824] loop9: unable to read partition table [ 370.829365][T18824] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 370.829365][T18824] ) failed (rc=-5) [ 370.907511][T18840] loop8: detected capacity change from 0 to 128 [ 370.921413][T18840] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 370.949616][T15355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.075648][T18881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 372.185351][T18884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4936'. [ 373.232856][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4941'. [ 373.263389][T18903] pimreg: entered allmulticast mode [ 373.366824][T18906] pimreg: left allmulticast mode [ 373.844979][T18951] loop1: detected capacity change from 0 to 128 [ 374.405096][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 374.405114][ T29] audit: type=1400 audit(381.761:17255): avc: denied { read } for pid=18954 comm="syz.4.4959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.864721][T18951] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.888143][ T29] audit: type=1400 audit(382.265:17256): avc: denied { setattr } for pid=18950 comm="syz.1.4957" path="/439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 374.988295][ T29] audit: type=1400 audit(382.370:17257): avc: denied { override_creds } for pid=18960 comm="syz.8.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 375.043743][ T29] audit: type=1400 audit(382.412:17258): avc: denied { shutdown } for pid=18960 comm="syz.8.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.063123][ T29] audit: type=1400 audit(382.412:17259): avc: denied { write } for pid=18960 comm="syz.8.4960" lport=34992 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 375.087017][ T29] audit: type=1400 audit(382.412:17260): avc: denied { getopt } for pid=18960 comm="syz.8.4960" lport=34992 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 375.110908][ T29] audit: type=1400 audit(382.422:17261): avc: denied { ioctl } for pid=18950 comm="syz.1.4957" path="/439/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.163383][T18965] tmpfs: Bad value for 'mpol' [ 375.207865][T18967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'. [ 375.230999][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.275775][T18974] loop9: detected capacity change from 0 to 7 [ 375.282140][T18974] Buffer I/O error on dev loop9, logical block 0, async page read [ 375.312575][T18974] Buffer I/O error on dev loop9, logical block 0, async page read [ 375.320444][T18974] loop9: unable to read partition table [ 375.331095][T18974] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 375.331095][T18974] ) failed (rc=-5) [ 375.446999][T18983] loop1: detected capacity change from 0 to 128 [ 375.475654][T18983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.533235][ T29] audit: type=1326 audit(382.947:17262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 375.556363][ T29] audit: type=1326 audit(382.947:17263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 375.579481][ T29] audit: type=1326 audit(382.947:17264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18982 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 375.645743][T18990] sd 0:0:1:0: device reset [ 375.813420][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.905270][T19005] loop8: detected capacity change from 0 to 128 [ 377.044424][T19005] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.917421][T19009] pimreg: entered allmulticast mode [ 377.951061][T19009] pimreg: left allmulticast mode [ 378.117669][T15355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.173133][T19021] loop9: detected capacity change from 0 to 7 [ 378.198713][T19021] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.198791][T19021] Buffer I/O error on dev loop9, logical block 0, async page read [ 378.198808][T19021] loop9: unable to read partition table [ 378.198880][T19021] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 378.198880][T19021] ) failed (rc=-5) [ 378.423455][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4990'. [ 378.432530][T19046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4990'. [ 378.579809][T19064] netlink: 'syz.3.4996': attribute type 1 has an invalid length. [ 378.592489][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4995'. [ 378.601648][T19066] netlink: 'syz.4.4995': attribute type 21 has an invalid length. [ 378.601987][T19064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.628447][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4996'. [ 378.632875][T19071] loop8: detected capacity change from 0 to 1024 [ 378.644263][T19071] EXT4-fs: Ignoring removed nobh option [ 378.650158][T19071] EXT4-fs: Ignoring removed orlov option [ 378.663271][T19064] bond1 (unregistering): Released all slaves [ 378.675324][T19071] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.697743][T19035] chnl_net:caif_netlink_parms(): no params data found [ 378.708422][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4997'. [ 378.710691][T19077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4998'. [ 378.817142][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.841823][ T3688] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.996376][T19035] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.003652][T19035] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.011113][T19035] bridge_slave_0: entered allmulticast mode [ 379.017954][T19035] bridge_slave_0: entered promiscuous mode [ 379.025188][T19035] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.032378][T19035] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.039881][T19035] bridge_slave_1: entered allmulticast mode [ 379.197463][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 379.197481][ T29] audit: type=1400 audit(386.789:17355): avc: denied { create } for pid=19100 comm="syz.3.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 379.326661][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5004'. [ 379.367757][T19035] bridge_slave_1: entered promiscuous mode [ 379.408083][T19035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.460967][T19035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.562203][T19035] team0: Port device team_slave_0 added [ 379.594826][T19035] team0: Port device team_slave_1 added [ 379.829867][T19035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.836958][T19035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.863102][T19035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.921849][T19035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.928920][T19035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.954925][T19035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.023446][T19113] xt_TPROXY: Can be used only with -p tcp or -p udp [ 380.040595][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'. [ 380.049633][T19113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5010'. [ 380.080606][ T3688] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.172369][ T3688] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.194691][T19035] hsr_slave_0: entered promiscuous mode [ 380.219073][T19035] hsr_slave_1: entered promiscuous mode [ 380.225201][T19035] debugfs: 'hsr0' already exists in 'hsr' [ 380.230975][T19035] Cannot create hsr debugfs directory [ 380.249627][ T3688] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.265789][ T29] audit: type=1400 audit(387.902:17356): avc: denied { connect } for pid=19135 comm="syz.3.5019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.334696][T19138] binfmt_misc: register: failed to install interpreter file ./file0 [ 380.421468][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5022'. [ 380.491421][T19151] loop1: detected capacity change from 0 to 1764 [ 380.498281][T19151] iso9660: Unknown parameter 'GPL' [ 380.549210][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.559629][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.581295][ T3688] bond0 (unregistering): Released all slaves [ 380.627450][ T29] audit: type=1400 audit(388.290:17357): avc: denied { write } for pid=19156 comm="syz.1.5025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 380.675252][ T3688] hsr_slave_0: left promiscuous mode [ 380.691837][ T3688] hsr_slave_1: left promiscuous mode [ 380.698359][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.706046][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.717302][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.724950][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.837026][T19172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19172 comm=syz.3.5031 [ 380.857701][ T3688] veth1_vlan: left promiscuous mode [ 380.868614][ T3688] veth0_vlan: left promiscuous mode [ 381.599898][T19184] loop8: detected capacity change from 0 to 512 [ 381.609623][T19184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.625476][T19184] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.5033: invalid block [ 381.640683][T19184] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5033: invalid indirect mapped block 4294967295 (level 1) [ 381.671028][T19184] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5033: invalid indirect mapped block 4294967295 (level 1) [ 381.693108][ T3688] team0 (unregistering): Port device team_slave_1 removed [ 381.706662][ T3688] team0 (unregistering): Port device team_slave_0 removed [ 381.714291][T19184] EXT4-fs (loop8): 2 truncates cleaned up [ 381.725321][T19184] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.882226][T19035] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 381.907510][T19035] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 381.920150][ T29] audit: type=1400 audit(389.655:17358): avc: denied { write } for pid=19191 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 381.943796][T19035] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 381.946871][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.962956][T19035] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 381.974528][T19194] loop1: detected capacity change from 0 to 1024 [ 382.001746][T19194] EXT4-fs: Ignoring removed orlov option [ 382.008100][T19194] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 382.048990][T19194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.118866][ T29] audit: type=1400 audit(389.865:17359): avc: denied { shutdown } for pid=19215 comm="syz.4.5043" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 382.130877][T19035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.152826][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.155701][T19035] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.200436][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.207551][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.230726][ T29] audit: type=1400 audit(389.981:17360): avc: denied { execute } for pid=19191 comm="syz.3.5036" path="/375/cpu.stat" dev="tmpfs" ino=2010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 382.260338][T19227] loop1: detected capacity change from 0 to 512 [ 382.272394][T19227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.282073][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.289199][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.302433][T19227] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5044: invalid block [ 382.341254][T19227] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5044: invalid indirect mapped block 4294967295 (level 1) [ 382.390844][T19231] netlink: 'syz.8.5047': attribute type 21 has an invalid length. [ 382.408047][T19227] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5044: invalid indirect mapped block 4294967295 (level 1) [ 382.426271][T19231] loop8: detected capacity change from 0 to 128 [ 382.440876][T19227] EXT4-fs (loop1): 2 truncates cleaned up [ 382.453716][T19227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.469325][T19231] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 382.532720][T19227] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.5044: path /456/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 382.567135][T19035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.676385][T15355] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.688021][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.845748][T19035] veth0_vlan: entered promiscuous mode [ 382.857235][T19274] loop8: detected capacity change from 0 to 1024 [ 382.869683][T19274] EXT4-fs: Ignoring removed orlov option [ 382.885650][T19035] veth1_vlan: entered promiscuous mode [ 382.891680][T19274] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 382.916550][T19035] veth0_macvtap: entered promiscuous mode [ 382.925908][T19035] veth1_macvtap: entered promiscuous mode [ 382.932665][T19274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.964701][T19035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.989365][T19035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.009042][ T3710] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.038650][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.053818][ T3710] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.073250][ T29] audit: type=1400 audit(390.862:17361): avc: denied { mounton } for pid=19035 comm="syz-executor" path="/root/syzkaller.OYVNJD/syz-tmp" dev="sda1" ino=2063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 383.090185][ T3710] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.121527][ T29] audit: type=1400 audit(390.862:17362): avc: denied { mount } for pid=19035 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 383.143489][ T29] audit: type=1400 audit(390.862:17363): avc: denied { mounton } for pid=19035 comm="syz-executor" path="/root/syzkaller.OYVNJD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 383.153190][ T3710] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.169844][ T29] audit: type=1400 audit(390.862:17364): avc: denied { mounton } for pid=19035 comm="syz-executor" path="/root/syzkaller.OYVNJD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 383.384057][T19307] loop9: detected capacity change from 0 to 256 [ 383.441555][T19317] netlink: 'syz.1.5061': attribute type 21 has an invalid length. [ 383.584168][T19346] loop8: detected capacity change from 0 to 512 [ 383.672451][T19357] loop9: detected capacity change from 0 to 512 [ 383.707381][T19357] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.763434][T19357] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.774486][T19364] __nla_validate_parse: 1 callbacks suppressed [ 383.774583][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5066'. [ 383.803376][T19350] pimreg: entered allmulticast mode [ 383.814238][T19350] pimreg: left allmulticast mode [ 383.822864][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5066'. [ 383.962172][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 383.962188][ T29] audit: type=1326 audit(391.797:17378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 383.991385][ T29] audit: type=1326 audit(391.807:17379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.014590][ T29] audit: type=1326 audit(391.807:17380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.053488][ T29] audit: type=1326 audit(391.891:17381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.076470][ T29] audit: type=1326 audit(391.891:17382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.099757][ T29] audit: type=1326 audit(391.891:17383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.122958][ T29] audit: type=1326 audit(391.891:17384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.145893][ T29] audit: type=1326 audit(391.891:17385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.169002][ T29] audit: type=1326 audit(391.891:17386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.192046][ T29] audit: type=1326 audit(391.891:17387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19377 comm="syz.8.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 384.343342][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5073'. [ 384.370952][T19392] loop8: detected capacity change from 0 to 512 [ 384.441850][T19392] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.5077: error while reading EA inode 32 err=-116 [ 384.442144][T19392] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.5077: error while reading EA inode 32 err=-116 [ 384.446053][T19392] EXT4-fs (loop8): 1 orphan inode deleted [ 384.446659][T19392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.456744][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5077'. [ 384.458196][T19392] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 384.501868][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5079'. [ 385.413300][T19417] pimreg: entered allmulticast mode [ 385.413846][T19417] pimreg: left allmulticast mode [ 385.514943][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.630873][T19432] loop9: detected capacity change from 0 to 7 [ 385.637226][T19432] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.647220][T19432] Buffer I/O error on dev loop9, logical block 0, async page read [ 385.655108][T19432] loop9: unable to read partition table [ 385.687284][T19432] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 385.687284][T19432] ) failed (rc=-5) [ 385.760836][T19434] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 386.324493][T19470] pimreg: entered allmulticast mode [ 386.576388][T19479] netlink: '+}[@': attribute type 30 has an invalid length. [ 386.902170][T19490] pimreg: left allmulticast mode [ 386.992535][T19502] dummy0: entered allmulticast mode [ 387.279482][T19523] bridge_slave_0: left allmulticast mode [ 387.285199][T19523] bridge_slave_0: left promiscuous mode [ 387.291196][T19523] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.303137][T19525] sd 0:0:1:0: device reset [ 387.307169][T19523] bridge_slave_1: left allmulticast mode [ 387.313300][T19523] bridge_slave_1: left promiscuous mode [ 387.319055][T19523] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.332849][T19523] bond0: (slave bond_slave_0): Releasing backup interface [ 387.357530][T19523] bond0: (slave bond_slave_1): Releasing backup interface [ 387.365360][T19530] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5118'. [ 387.384148][T19523] team0: Port device team_slave_0 removed [ 387.408448][T19523] team0: Port device team_slave_1 removed [ 387.417715][T19523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.425194][T19523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.435845][T19523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.443455][T19523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.459469][T19523] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.577004][T19538] loop9: detected capacity change from 0 to 1024 [ 387.603695][T19538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.622009][T19538] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.5119: Allocating blocks 497-513 which overlap fs metadata [ 387.638276][T19538] EXT4-fs (loop9): pa ffff888106df8d90: logic 256, phys. 369, len 9 [ 387.646376][T19538] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 387.658095][T19538] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 387.701964][T19035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.208162][T19551] loop1: detected capacity change from 0 to 1024 [ 388.215604][T19551] EXT4-fs: Ignoring removed orlov option [ 388.222986][T19551] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 388.249999][T19551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.286893][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.340168][T19559] loop8: detected capacity change from 0 to 1024 [ 388.361065][T19555] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 388.367814][T19555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.375442][T19555] vhci_hcd vhci_hcd.0: Device attached [ 388.391948][T19559] EXT4-fs: Ignoring removed orlov option [ 388.417806][T19559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.456982][T19559] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.617449][T19571] loop8: detected capacity change from 0 to 512 [ 388.640561][T19571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.652540][T19571] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.5127: invalid block [ 388.712507][T19571] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5127: invalid indirect mapped block 4294967295 (level 1) [ 388.727575][ T3399] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 388.816010][T19571] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5127: invalid indirect mapped block 4294967295 (level 1) [ 388.847098][T19579] wireguard0: entered promiscuous mode [ 388.852656][T19579] wireguard0: entered allmulticast mode [ 388.890679][T19571] EXT4-fs (loop8): 2 truncates cleaned up [ 388.903852][T19580] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 388.912255][T19571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.966348][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 388.966366][ T29] audit: type=1326 audit(398.046:17790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 388.995653][ T29] audit: type=1326 audit(398.046:17791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 389.018715][ T29] audit: type=1326 audit(398.046:17792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 389.041729][ T29] audit: type=1326 audit(398.046:17793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe9baf8eec9 code=0x7ffc0000 [ 389.064757][ T29] audit: type=1326 audit(398.046:17794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9baf8ef03 code=0x7ffc0000 [ 389.097627][T19557] loop1: detected capacity change from 0 to 1024 [ 389.124738][T19562] vhci_hcd: connection reset by peer [ 389.134354][ T3677] vhci_hcd: stop threads [ 389.138689][ T3677] vhci_hcd: release socket [ 389.143160][ T3677] vhci_hcd: disconnect device [ 389.160566][ T29] audit: type=1326 audit(398.183:17795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe9baf8d97f code=0x7ffc0000 [ 389.164106][T19586] loop9: detected capacity change from 0 to 128 [ 389.183489][ T29] audit: type=1326 audit(398.183:17796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe9baf8ef57 code=0x7ffc0000 [ 389.212722][ T29] audit: type=1326 audit(398.183:17797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9baf8d710 code=0x7ffc0000 [ 389.235895][ T29] audit: type=1326 audit(398.193:17798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9baf8eacb code=0x7ffc0000 [ 389.258825][ T29] audit: type=1326 audit(398.204:17799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.1.5124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe9baf8db2a code=0x7ffc0000 [ 389.311580][T19400] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 389.326632][T19587] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.8.5127: path /271/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 389.360475][T19586] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.373844][T19557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.446421][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 389.462811][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 389.478018][T19035] EXT4-fs error (device loop9): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 389.498225][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 389.512954][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 389.527707][T19035] EXT4-fs error (device loop9): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 389.586997][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.606987][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 389.639160][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 389.667926][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.687367][T19035] EXT4-fs error (device loop9): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 389.710836][T19035] EXT4-fs error (device loop9): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 389.881140][T19481] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.019350][T19616] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 390.030542][T19616] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 390.041289][T19616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5141'. [ 390.062866][T19611] 9pnet_fd: Insufficient options for proto=fd [ 390.069656][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5141'. [ 390.113272][ T3686] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.209044][ T3686] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.271303][ T3686] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.405623][ T3686] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.231665][ T3686] bond0 (unregistering): Released all slaves [ 391.324022][T19660] syzkaller0: entered promiscuous mode [ 391.329704][T19660] syzkaller0: entered allmulticast mode [ 391.384034][ T3686] hsr_slave_0: left promiscuous mode [ 391.390163][ T3686] hsr_slave_1: left promiscuous mode [ 391.408191][ T3686] veth1_macvtap: left promiscuous mode [ 391.419531][ T3686] veth0_macvtap: left promiscuous mode [ 391.426146][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5153'. [ 391.435759][ T3686] veth1_vlan: left promiscuous mode [ 391.441290][ T3686] veth0_vlan: left promiscuous mode [ 391.586830][T19669] loop8: detected capacity change from 0 to 512 [ 391.602401][T19669] ext4: Unknown parameter 'euid>00000000000000000000' [ 391.642229][ T3686] dummy0 (unregistering): left allmulticast mode [ 391.725498][T19673] netlink: 340 bytes leftover after parsing attributes in process `syz.8.5157'. [ 391.826069][T19627] chnl_net:caif_netlink_parms(): no params data found [ 391.855195][T19683] loop8: detected capacity change from 0 to 1024 [ 391.880539][T19683] EXT4-fs: Ignoring removed orlov option [ 391.902501][T19683] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 391.953492][T19627] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.960593][T19627] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.982366][T19683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.016752][T19627] bridge_slave_0: entered allmulticast mode [ 392.036183][T19627] bridge_slave_0: entered promiscuous mode [ 392.062874][T19627] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.070016][T19627] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.090702][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.102407][T19627] bridge_slave_1: entered allmulticast mode [ 392.156654][T19627] bridge_slave_1: entered promiscuous mode [ 392.233839][T19627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.275970][T19627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.296761][T19700] loop1: detected capacity change from 0 to 128 [ 392.335582][T19700] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 392.373816][T19707] loop8: detected capacity change from 0 to 128 [ 392.402733][T19627] team0: Port device team_slave_0 added [ 392.420935][T19627] team0: Port device team_slave_1 added [ 392.447209][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.497930][T19711] loop8: detected capacity change from 0 to 1024 [ 392.512705][T19711] EXT4-fs: Ignoring removed orlov option [ 392.524886][T19711] ext4: Unknown parameter 'obj_type' [ 392.536202][T19627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.543288][T19627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.569302][T19627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.659066][T19627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.666078][T19627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.692154][T19627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.759320][T19627] hsr_slave_0: entered promiscuous mode [ 392.771328][T19627] hsr_slave_1: entered promiscuous mode [ 392.826274][T19627] debugfs: 'hsr0' already exists in 'hsr' [ 392.832086][T19627] Cannot create hsr debugfs directory [ 392.865709][T19732] loop1: detected capacity change from 0 to 128 [ 393.276007][T19757] loop1: detected capacity change from 0 to 512 [ 393.304645][T19757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.336533][T19757] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5182: invalid block [ 393.372796][T19757] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5182: invalid indirect mapped block 4294967295 (level 1) [ 393.416704][T19757] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5182: invalid indirect mapped block 4294967295 (level 1) [ 393.458618][T19757] EXT4-fs (loop1): 2 truncates cleaned up [ 393.488300][T19757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.539853][T19627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.580331][T19627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.595015][T19627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.603259][T19777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5185'. [ 393.614765][ T3399] usb 19-1: enqueue for inactive port 0 [ 393.617236][T19627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.630886][T19757] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.5182: path /492/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 393.654722][ T3399] usb 19-1: enqueue for inactive port 0 [ 393.699877][T19799] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5189'. [ 393.744518][ T3399] vhci_hcd: vhci_device speed not set [ 393.783977][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.799620][T19627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.853111][T19804] rdma_rxe: rxe_newlink: failed to add lo [ 393.859126][T19803] lo speed is unknown, defaulting to 1000 [ 393.861685][T19627] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.891464][T19803] lo speed is unknown, defaulting to 1000 [ 393.899059][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.906398][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.918657][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 393.918678][ T29] audit: type=1326 audit(403.253:18018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 393.919558][T19823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5194'. [ 393.925077][ T29] audit: type=1326 audit(403.253:18019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 393.954694][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.957300][ T29] audit: type=1326 audit(403.253:18020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 393.980264][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.017803][ T29] audit: type=1326 audit(403.253:18021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.040810][ T29] audit: type=1326 audit(403.253:18022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.063906][ T29] audit: type=1326 audit(403.253:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.087534][ T29] audit: type=1326 audit(403.253:18024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.097518][T19828] loop1: detected capacity change from 0 to 512 [ 394.125022][T19830] loop8: detected capacity change from 0 to 128 [ 394.134322][T19803] lo speed is unknown, defaulting to 1000 [ 394.176868][T19803] infiniband sz1: set active [ 394.181648][T19803] infiniband sz1: added lo [ 394.186339][T16304] lo speed is unknown, defaulting to 1000 [ 394.192047][ T29] audit: type=1326 audit(403.253:18025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.199636][T19830] bio_check_eod: 2 callbacks suppressed [ 394.199657][T19830] syz.8.5197: attempt to access beyond end of device [ 394.199657][T19830] loop8: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 394.215215][ T29] audit: type=1326 audit(403.253:18026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.257371][ T29] audit: type=1326 audit(403.253:18027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19820 comm="syz.4.5194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x7ffc0000 [ 394.302827][T19803] RDS/IB: sz1: added [ 394.311723][T19828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.341372][T19803] lo speed is unknown, defaulting to 1000 [ 394.366002][T19830] syz.8.5197: attempt to access beyond end of device [ 394.366002][T19830] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 394.387369][T19830] syz.8.5197: attempt to access beyond end of device [ 394.387369][T19830] loop8: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 394.401423][T19830] syz.8.5197: attempt to access beyond end of device [ 394.401423][T19830] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 394.413634][T19828] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 394.415738][T19830] syz.8.5197: attempt to access beyond end of device [ 394.415738][T19830] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 394.446451][T19830] syz.8.5197: attempt to access beyond end of device [ 394.446451][T19830] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 394.451945][T19627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.475138][T19828] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 394.487513][T19828] EXT4-fs (loop1): This should not happen!! Data will be lost [ 394.487513][T19828] [ 394.497244][T19828] EXT4-fs (loop1): Total free blocks count 0 [ 394.503335][T19828] EXT4-fs (loop1): Free/Dirty block details [ 394.509334][T19828] EXT4-fs (loop1): free_blocks=39626 [ 394.514646][T19828] EXT4-fs (loop1): dirty_blocks=16 [ 394.519801][T19828] EXT4-fs (loop1): Block reservation details [ 394.525887][T19828] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 394.564430][T19830] syz.8.5197: attempt to access beyond end of device [ 394.564430][T19830] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 394.583800][T19803] lo speed is unknown, defaulting to 1000 [ 394.594224][ T3711] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 9 with max blocks 8 with error 28 [ 394.615494][ T3710] kworker/u8:54: attempt to access beyond end of device [ 394.615494][ T3710] loop8: rw=1, sector=161, nr_sectors = 1 limit=128 [ 394.666185][T19876] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5201'. [ 394.715799][T19803] lo speed is unknown, defaulting to 1000 [ 394.723761][T19627] veth0_vlan: entered promiscuous mode [ 394.739869][T19627] veth1_vlan: entered promiscuous mode [ 394.774564][T19803] lo speed is unknown, defaulting to 1000 [ 394.792227][T19627] veth0_macvtap: entered promiscuous mode [ 394.807293][T19884] loop1: detected capacity change from 0 to 512 [ 394.822905][T19627] veth1_macvtap: entered promiscuous mode [ 394.838475][T19884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 394.839853][T19803] lo speed is unknown, defaulting to 1000 [ 394.860675][T19627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.880351][T19627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.895104][T19884] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5202: invalid block [ 394.918730][ T3711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.928096][T19803] lo speed is unknown, defaulting to 1000 [ 394.946327][ T3711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.965373][T19884] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5202: invalid indirect mapped block 4294967295 (level 1) [ 395.006294][ T3711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.027221][T19884] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5202: invalid indirect mapped block 4294967295 (level 1) [ 395.043545][ T3711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.082198][T19884] EXT4-fs (loop1): 2 truncates cleaned up [ 395.097488][T19884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.127064][T19884] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.5202: path /497/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 395.168862][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.277067][T19924] loop1: detected capacity change from 0 to 4096 [ 395.319735][T19924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.346163][T19924] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.5204: Failed to acquire dquot type 0 [ 395.369559][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5208'. [ 395.402434][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.487441][T19953] bond1: entered promiscuous mode [ 395.492559][T19953] bond1: entered allmulticast mode [ 395.519395][T19953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.552230][T19953] bond1 (unregistering): Released all slaves [ 395.686204][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.695273][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.704971][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.709477][T19981] loop1: detected capacity change from 0 to 512 [ 395.740242][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.749333][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.758651][T19981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.770659][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.800390][T19981] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5215: invalid block [ 395.833520][T19981] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5215: invalid indirect mapped block 4294967295 (level 1) [ 395.862130][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.871480][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.890917][T19981] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5215: invalid indirect mapped block 4294967295 (level 1) [ 395.922839][T19978] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5214'. [ 395.964114][T19981] EXT4-fs (loop1): 2 truncates cleaned up [ 395.970368][T19981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.014532][T19981] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.5215: path /502/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 396.133104][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.293886][T20020] loop1: detected capacity change from 0 to 512 [ 396.397274][T20020] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.435681][T20020] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 396.478231][T20020] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 396.506219][T20020] EXT4-fs (loop1): orphan cleanup on readonly fs [ 396.539952][T20020] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.5219: Invalid block bitmap block 0 in block_group 0 [ 396.594881][T20020] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.5219: Invalid block bitmap block 0 in block_group 0 [ 396.640274][T20020] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.5219: Invalid block bitmap block 0 in block_group 0 [ 396.692142][T20020] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.5219: Failed to acquire dquot type 1 [ 396.736254][T20020] EXT4-fs (loop1): 1 orphan inode deleted [ 396.844514][T20027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.082572][T20031] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 397.145138][ T3710] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:54: Failed to release dquot type 1 [ 397.159283][T20020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 397.185296][T12647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.215370][T20047] loop8: detected capacity change from 0 to 512 [ 397.298548][T20047] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 397.324860][T20047] EXT4-fs (loop8): 1 truncate cleaned up [ 397.334029][T20047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.364494][T20058] veth0: entered promiscuous mode [ 398.352618][T20060] veth0: left promiscuous mode [ 398.870233][T20073] lo speed is unknown, defaulting to 1000 [ 398.929255][T20077] pimreg: entered allmulticast mode [ 398.948533][T15355] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.993817][T20083] sd 0:0:1:0: device reset [ 399.098488][T20097] dummy0: entered allmulticast mode [ 399.125335][T20097] wireguard0: entered promiscuous mode [ 399.131079][T20097] wireguard0: entered allmulticast mode [ 399.139144][T20102] loop8: detected capacity change from 0 to 256 [ 399.174033][T20109] loop1: detected capacity change from 0 to 128 [ 399.193307][T20109] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.205426][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 399.205445][ T29] audit: type=1326 audit(408.796:18077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20074 comm="syz.4.5231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc678ceeec9 code=0x0 [ 399.234354][T20113] pimreg: left allmulticast mode [ 399.245396][T20112] loop8: detected capacity change from 0 to 1024 [ 399.262040][T20095] dummy0: left allmulticast mode [ 399.332316][ T29] audit: type=1400 audit(408.933:18078): avc: denied { read write } for pid=20111 comm="syz.8.5239" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 399.333283][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.355408][ T29] audit: type=1400 audit(408.933:18079): avc: denied { open } for pid=20111 comm="syz.8.5239" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 399.362870][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.393334][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.400756][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.408286][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x2 [ 399.415752][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.423305][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.430931][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.438416][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.445935][T16304] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 399.469975][T16304] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 399.479912][ T29] audit: type=1400 audit(409.080:18080): avc: denied { write } for pid=20111 comm="syz.8.5239" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 399.592789][T12647] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.634175][ T29] audit: type=1400 audit(409.258:18081): avc: denied { create } for pid=20128 comm="syz.1.5244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 399.682609][ T29] audit: type=1400 audit(409.279:18082): avc: denied { sys_admin } for pid=20128 comm="syz.1.5244" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 399.703445][ T29] audit: type=1326 audit(409.290:18083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.8.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 399.715662][T20133] 9pnet: Could not find request transport: fdC;dno=QQ$j0 [ 399.726878][ T29] audit: type=1326 audit(409.290:18084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.8.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 399.757383][ T29] audit: type=1326 audit(409.290:18085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.8.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 399.767651][T20129] lo speed is unknown, defaulting to 1000 [ 399.780430][ T29] audit: type=1326 audit(409.290:18086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20130 comm="syz.8.5245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee971aeec9 code=0x7ffc0000 [ 399.858306][T20137] loop0: detected capacity change from 0 to 1024 [ 399.875234][T20137] EXT4-fs: Ignoring removed bh option [ 399.923948][T20137] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 399.948740][T20137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.090670][T20137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.178278][T20137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.264178][T20137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.305722][T20137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.405725][ T3677] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.431899][ T3677] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.435863][ T3677] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.452390][ T3677] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.519523][T19627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.581475][T20155] loop0: detected capacity change from 0 to 512 [ 400.598657][T20155] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.5250: Parent and EA inode have the same ino 15 [ 400.599024][T20155] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.5250: Parent and EA inode have the same ino 15 [ 400.599375][T20155] EXT4-fs (loop0): 1 orphan inode deleted [ 400.599955][T20155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.603066][T20155] __nla_validate_parse: 5 callbacks suppressed [ 400.603087][T20155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5250'. [ 400.756066][T19627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.770288][T20163] loop1: detected capacity change from 0 to 1024 [ 400.806860][T20163] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 400.848385][T20166] loop0: detected capacity change from 0 to 1024 [ 400.891341][T20167] lo speed is unknown, defaulting to 1000 [ 400.910506][T20166] EXT4-fs: Ignoring removed orlov option [ 400.938685][T20166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.037099][T20173] ref_ctr_offset mismatch. inode: 0x12 offset: 0x0 ref_ctr_offset(old): 0x4000000 ref_ctr_offset(new): 0x0 [ 401.099222][T20169] pimreg: entered allmulticast mode [ 401.136448][T20169] pimreg: left allmulticast mode [ 401.594252][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5267'. [ 401.697937][T20203] ================================================================== [ 401.706088][T20203] BUG: KCSAN: data-race in futex_hash_allocate / futex_hash_allocate [ 401.714215][T20203] [ 401.716566][T20203] read-write to 0xffff88810005d768 of 8 bytes by task 20201 on cpu 0: [ 401.724743][T20203] futex_hash_allocate+0x67a/0x9d0 [ 401.729911][T20203] futex_hash_prctl+0xd9/0xf0 [ 401.734663][T20203] __se_sys_prctl+0xc88/0x12e0 [ 401.739473][T20203] __x64_sys_prctl+0x67/0x80 [ 401.744117][T20203] x64_sys_call+0x20cf/0x3000 [ 401.748902][T20203] do_syscall_64+0xd2/0x200 [ 401.753451][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.759391][T20203] [ 401.761737][T20203] read to 0xffff88810005d768 of 8 bytes by task 20203 on cpu 1: [ 401.769408][T20203] futex_hash_allocate+0x601/0x9d0 [ 401.774575][T20203] futex_hash_prctl+0xd9/0xf0 [ 401.779300][T20203] __se_sys_prctl+0xc88/0x12e0 [ 401.784112][T20203] __x64_sys_prctl+0x67/0x80 [ 401.788745][T20203] x64_sys_call+0x20cf/0x3000 [ 401.793457][T20203] do_syscall_64+0xd2/0x200 [ 401.798000][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.803936][T20203] [ 401.806277][T20203] value changed: 0xffff8881192057c0 -> 0x0000000000000000 [ 401.813462][T20203] [ 401.815807][T20203] Reported by Kernel Concurrency Sanitizer on: [ 401.821984][T20203] CPU: 1 UID: 0 PID: 20203 Comm: syz.3.5268 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 401.824812][T20201] infiniband syz!: set down [ 401.833387][T20203] Tainted: [W]=WARN [ 401.833400][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.833416][T20203] ================================================================== [ 401.860174][T20201] infiniband syz!: added team_slave_0 [ 401.868139][T20201] RDS/IB: syz!: added [ 401.891952][T19627] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.