last executing test programs: 5m46.267446231s ago: executing program 3 (id=1157): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) timer_create(0xb, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000240), 0x7f03) 5m43.252743041s ago: executing program 0 (id=1194): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x65, 0xff, 0x5e, 0xb, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x7, 0x800, 0x4, 0xc, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 5m43.212832431s ago: executing program 3 (id=1195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 5m43.037886124s ago: executing program 3 (id=1199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x800}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfffffff7}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x4}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7a3edbe6}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}]}}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x1000}, 0x18) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r9, 0x5453, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000091411"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0x7}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r11, &(0x7f00000003c0)="a7", 0xfffffffffffffd51, 0x0, 0x0, 0xfffffee2) 5m42.883195667s ago: executing program 0 (id=1201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@jqfmt_vfsold}, {@errors_remount}, {@quota}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x16}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000480)) msgget$private(0x0, 0x440) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000003c0)={[{@usrquota}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@debug}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 5m42.504496443s ago: executing program 0 (id=1205): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) timer_create(0xb, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000240), 0x7f03) 5m42.389557625s ago: executing program 2 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0}, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) recvmmsg(r2, &(0x7f00000023c0)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000300)=""/213, 0xd5}, {0x0}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/162, 0xa2}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000001e00)=""/83, 0x53}, {&(0x7f0000001e80)=""/105, 0x69}], 0x8}}, {{&(0x7f0000001fc0)=@pppoe, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/177, 0xb1}], 0x1, &(0x7f0000002100)=""/65, 0x41}, 0x83}, {{&(0x7f0000002180)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000002200)=""/183, 0xb7}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f00000022c0)=""/241, 0xf1}], 0x3, &(0x7f0000000600)=""/20, 0x14}, 0x19}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m42.08034683s ago: executing program 3 (id=1211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) msgget$private(0x0, 0x440) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 5m41.642544787s ago: executing program 4 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) 5m41.613222468s ago: executing program 4 (id=1217): memfd_create(&(0x7f0000001000)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99\a\x00\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0Q2\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\x00\x00\x80h\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14@}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd3\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf\xc2\xec\xa1\x8a\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\x89\x97X\x05\x90\xc2\xe8\x85\x9d\xcb\xc8\xf0\xe1\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74\xf9(\"\xbe\x16\xad\xfe\f\x18\x14\x00\x83\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xec\xc8\xf6L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\'.\x03Y\b\x00\x00\x00}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xc4\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1}B\x953M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xde\nuR0\xddMG\au\xbc\x96R\xa2\xb7\x90\x87\x0e\xf6\xb2A\x0e\x1b4\xe0y\x9e\x89\x90\x03\x91v\xa4B\xfc~\xe1/\xb3I\xe1\x1d6k\x808\xc8\x9f\x95\n\xa9\xf6S\xa0&\xf1vU\b\x1d\xb1\xd2\xd4\x13zW)_\x06w\x01\xae\xf8\x8aRP\x89I~3\x18\x19\x8a\xa6\xd7\xe6/\xf0\x83\xdeF\x91\xd9\xc2\xbe0\xfa\xc5lp\x8c\x0e\x9cL\xf9\x9d&\x00\x00\x00\x00\x00\xb1A\x93\xdd=\x8e\xad\x0e\'\xb58\x1fO\xc3\x05\\\x10\xf5}\xfa\xa7\x92\x86z\xc1\xbf\xb3c\xa9\x1b6g\xa7e}\x8b`\xea\x0eO4\xaf\x89\xa6\xb3\x1e\x88Z6\xbd\x17\xe4\x96:\xa5?\xf2\x84\xc7\xa4n\xd2\xa7\x031\x05\xad\xf9\xa5NO\x813\x1d\xf9\x01\'\x00Ho\xaf\x93\x9b\'\xb3,\x85\xdb\xf1\x87_z\x80*K\xd2\xd5OWc\xbaY\x87\x19\xaen!\x14\x03R\xcc\xaf\xd5v\x7f\v\xa5\x12Z\xdf\xf3\x13\xce\xbdU\xeaT\xfe\xba\x15\xcb\x9d\x13%j\xc9\x954\x9fE{QE}~\xf8/?[t,&\x8b\xfd\xe1\xf9\xeb\xac\xd0\x9e\xa4t\xfd\xb8\x7f\xa2', 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r2, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x2040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r4, 0x98b, 0x2) 5m41.529935009s ago: executing program 2 (id=1218): memfd_create(&(0x7f0000001000)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99\a\x00\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0Q2\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\x00\x00\x80h\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14@}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd3\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf\xc2\xec\xa1\x8a\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\x89\x97X\x05\x90\xc2\xe8\x85\x9d\xcb\xc8\xf0\xe1\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74\xf9(\"\xbe\x16\xad\xfe\f\x18\x14\x00\x83\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xec\xc8\xf6L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\'.\x03Y\b\x00\x00\x00}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xc4\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1}B\x953M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xde\nuR0\xddMG\au\xbc\x96R\xa2\xb7\x90\x87\x0e\xf6\xb2A\x0e\x1b4\xe0y\x9e\x89\x90\x03\x91v\xa4B\xfc~\xe1/\xb3I\xe1\x1d6k\x808\xc8\x9f\x95\n\xa9\xf6S\xa0&\xf1vU\b\x1d\xb1\xd2\xd4\x13zW)_\x06w\x01\xae\xf8\x8aRP\x89I~3\x18\x19\x8a\xa6\xd7\xe6/\xf0\x83\xdeF\x91\xd9\xc2\xbe0\xfa\xc5lp\x8c\x0e\x9cL\xf9\x9d&\x00\x00\x00\x00\x00\xb1A\x93\xdd=\x8e\xad\x0e\'\xb58\x1fO\xc3\x05\\\x10\xf5}\xfa\xa7\x92\x86z\xc1\xbf\xb3c\xa9\x1b6g\xa7e}\x8b`\xea\x0eO4\xaf\x89\xa6\xb3\x1e\x88Z6\xbd\x17\xe4\x96:\xa5?\xf2\x84\xc7\xa4n\xd2\xa7\x031\x05\xad\xf9\xa5NO\x813\x1d\xf9\x01\'\x00Ho\xaf\x93\x9b\'\xb3,\x85\xdb\xf1\x87_z\x80*K\xd2\xd5OWc\xbaY\x87\x19\xaen!\x14\x03R\xcc\xaf\xd5v\x7f\v\xa5\x12Z\xdf\xf3\x13\xce\xbdU\xeaT\xfe\xba\x15\xcb\x9d\x13%j\xc9\x954\x9fE{QE}~\xf8/?[t,&\x8b\xfd\xe1\xf9\xeb\xac\xd0\x9e\xa4t\xfd\xb8\x7f\xa2', 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r3, 0x98b, 0x2) 5m41.527804549s ago: executing program 4 (id=1219): getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 5m41.50082293s ago: executing program 4 (id=1220): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x1000, 0x5dd8, 0x100000, 0x5, 0x0, 0xb, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) setxattr$system_posix_acl(0x0, &(0x7f0000000300)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgid(0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@RTM_GETNSID={0x3c, 0x5a, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c0f0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18799cb61cbe217da50000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfd9bb891a00000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00'}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1f, 0x0, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35", 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8000}, 0x50) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(0xffffffffffffffff, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f0000000340), &(0x7f0000000400)=r7}, 0x20) 5m41.410278281s ago: executing program 2 (id=1221): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 5m41.381204181s ago: executing program 2 (id=1222): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 5m41.325255003s ago: executing program 0 (id=1224): bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x114107, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000300)=r3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 5m41.324606333s ago: executing program 4 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x86) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_int(r3, &(0x7f00000001c0)=0x700, 0x12) getsockopt$sock_int(r2, 0x1, 0x3e, 0x0, &(0x7f0000000340)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x4) bind$packet(r7, &(0x7f0000000280)={0x11, 0x7, r8, 0x1, 0xdf, 0x6, @local}, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 5m41.216942084s ago: executing program 2 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@jqfmt_vfsold}, {@errors_remount}, {@quota}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x16}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000480)) msgget$private(0x0, 0x440) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 5m41.216466854s ago: executing program 0 (id=1227): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x65, 0xff, 0x5e, 0xb, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x7, 0x800, 0x4, 0xc, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 5m41.126801826s ago: executing program 4 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) 5m41.126528716s ago: executing program 32 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) 5m41.080923337s ago: executing program 3 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0}, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) recvmmsg(r2, &(0x7f00000023c0)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000300)=""/213, 0xd5}, {0x0}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/162, 0xa2}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000001e00)=""/83, 0x53}, {&(0x7f0000001e80)=""/105, 0x69}], 0x8}}, {{&(0x7f0000001fc0)=@pppoe, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/177, 0xb1}], 0x1, &(0x7f0000002100)=""/65, 0x41}, 0x83}, {{&(0x7f0000002180)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000002200)=""/183, 0xb7}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f00000022c0)=""/241, 0xf1}], 0x3, &(0x7f0000000600)=""/20, 0x14}, 0x19}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x68040200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m40.88176451s ago: executing program 2 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x8000) 5m40.8813827s ago: executing program 33 (id=1230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x8000) 5m40.88090932s ago: executing program 0 (id=1231): memfd_create(&(0x7f0000001000)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99\a\x00\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0Q2\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\x00\x00\x80h\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14@}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd3\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf\xc2\xec\xa1\x8a\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\x89\x97X\x05\x90\xc2\xe8\x85\x9d\xcb\xc8\xf0\xe1\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74\xf9(\"\xbe\x16\xad\xfe\f\x18\x14\x00\x83\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xec\xc8\xf6L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\'.\x03Y\b\x00\x00\x00}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xc4\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1}B\x953M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xde\nuR0\xddMG\au\xbc\x96R\xa2\xb7\x90\x87\x0e\xf6\xb2A\x0e\x1b4\xe0y\x9e\x89\x90\x03\x91v\xa4B\xfc~\xe1/\xb3I\xe1\x1d6k\x808\xc8\x9f\x95\n\xa9\xf6S\xa0&\xf1vU\b\x1d\xb1\xd2\xd4\x13zW)_\x06w\x01\xae\xf8\x8aRP\x89I~3\x18\x19\x8a\xa6\xd7\xe6/\xf0\x83\xdeF\x91\xd9\xc2\xbe0\xfa\xc5lp\x8c\x0e\x9cL\xf9\x9d&\x00\x00\x00\x00\x00\xb1A\x93\xdd=\x8e\xad\x0e\'\xb58\x1fO\xc3\x05\\\x10\xf5}\xfa\xa7\x92\x86z\xc1\xbf\xb3c\xa9\x1b6g\xa7e}\x8b`\xea\x0eO4\xaf\x89\xa6\xb3\x1e\x88Z6\xbd\x17\xe4\x96:\xa5?\xf2\x84\xc7\xa4n\xd2\xa7\x031\x05\xad\xf9\xa5NO\x813\x1d\xf9\x01\'\x00Ho\xaf\x93\x9b\'\xb3,\x85\xdb\xf1\x87_z\x80*K\xd2\xd5OWc\xbaY\x87\x19\xaen!\x14\x03R\xcc\xaf\xd5v\x7f\v\xa5\x12Z\xdf\xf3\x13\xce\xbdU\xeaT\xfe\xba\x15\xcb\x9d\x13%j\xc9\x954\x9fE{QE}~\xf8/?[t,&\x8b\xfd\xe1\xf9\xeb\xac\xd0\x9e\xa4t\xfd\xb8\x7f\xa2', 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r3, 0x98b, 0x2) 5m40.87144129s ago: executing program 34 (id=1231): memfd_create(&(0x7f0000001000)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99\a\x00\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0Q2\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\x00\x00\x80h\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14@}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd3\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf\xc2\xec\xa1\x8a\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\x89\x97X\x05\x90\xc2\xe8\x85\x9d\xcb\xc8\xf0\xe1\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74\xf9(\"\xbe\x16\xad\xfe\f\x18\x14\x00\x83\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xec\xc8\xf6L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\'.\x03Y\b\x00\x00\x00}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xc4\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1}B\x953M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xde\nuR0\xddMG\au\xbc\x96R\xa2\xb7\x90\x87\x0e\xf6\xb2A\x0e\x1b4\xe0y\x9e\x89\x90\x03\x91v\xa4B\xfc~\xe1/\xb3I\xe1\x1d6k\x808\xc8\x9f\x95\n\xa9\xf6S\xa0&\xf1vU\b\x1d\xb1\xd2\xd4\x13zW)_\x06w\x01\xae\xf8\x8aRP\x89I~3\x18\x19\x8a\xa6\xd7\xe6/\xf0\x83\xdeF\x91\xd9\xc2\xbe0\xfa\xc5lp\x8c\x0e\x9cL\xf9\x9d&\x00\x00\x00\x00\x00\xb1A\x93\xdd=\x8e\xad\x0e\'\xb58\x1fO\xc3\x05\\\x10\xf5}\xfa\xa7\x92\x86z\xc1\xbf\xb3c\xa9\x1b6g\xa7e}\x8b`\xea\x0eO4\xaf\x89\xa6\xb3\x1e\x88Z6\xbd\x17\xe4\x96:\xa5?\xf2\x84\xc7\xa4n\xd2\xa7\x031\x05\xad\xf9\xa5NO\x813\x1d\xf9\x01\'\x00Ho\xaf\x93\x9b\'\xb3,\x85\xdb\xf1\x87_z\x80*K\xd2\xd5OWc\xbaY\x87\x19\xaen!\x14\x03R\xcc\xaf\xd5v\x7f\v\xa5\x12Z\xdf\xf3\x13\xce\xbdU\xeaT\xfe\xba\x15\xcb\x9d\x13%j\xc9\x954\x9fE{QE}~\xf8/?[t,&\x8b\xfd\xe1\xf9\xeb\xac\xd0\x9e\xa4t\xfd\xb8\x7f\xa2', 0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) unshare(0x22020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r3, 0x98b, 0x2) 5m40.84766073s ago: executing program 3 (id=1233): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 5m40.84739089s ago: executing program 35 (id=1233): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4f, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 2.089225156s ago: executing program 1 (id=6099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 2.066454296s ago: executing program 1 (id=6101): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3bfd, 0x80, 0x3, 0x205}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.020197437s ago: executing program 1 (id=6103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.957856598s ago: executing program 1 (id=6104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa11000300686173683a6e65742c6e657400000007050004"], 0x60}}, 0x0) r6 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x630e, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 1.899124489s ago: executing program 1 (id=6105): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x43e, &(0x7f0000000fc0)="$eJzs2z1sG1UcAPD/nZOUfsaU8tEPSqAgIj6SNi3QgQUEEgNISDCUMSRpVeo2qAkSrSooCJURVWJHjEiMTEywIGBCYoUdVapQlxYmo7PvEtvYaWw5ccG/n3Tue75nvf+/d89+dy8XwNCayF6SiB0R8VtEjNerzQ0m6v/cunFp7q8bl+aSqFbf+DOptbt549Jc0bT43Pa8MplGpJ8ksb9Nv0sXLp6ZrVQWzuf16eWz704vXbj49Omzs6cWTi2cmzl+/NjRI889O/NMX/LMYrq574PFA3tfeevqa3Mnrr7909dJkX9LHn0ysdbOx6rVPnc3WDsbysnIAAOhK6WIyA7XaG38j0cpVg/eeLz88UCDAzZUtVqtbu+8+3IV+B9LYtARAINR/NBn17/FtklTjzvC9RfqF0BZ3rfyrb5nJNK8zWjL9W0/TUTEict/f5FtsTH3IQAAmnyXzX+eajf/S+O+hna78rWhckTcHRG7I+KeiNgTEfdG1NreHxEPdNl/6yLJv+c/6bWeElunbP73fL621Tz/K2Z/US7ltZ21/EeTkwd31XZkr5MxuuXk6crCkTX6+P6lXz/rtK9x/pdtWf/FXDCP49rIlubPzM8uz/aecbPrH0XsG2mXf7KyEpBExN6I2NdjH6ef+OpAp323z7/ZWGOlD+tM1S8jHq8f/8vRkn8hWXt9cvquqCwcns7OgsNt+/j5lyuvd+q/2/z7LTv+29qe/yv5l5PG9dql7vu48vunHa9pej3/x5I3a+XifHh/dnn5/JGIseTVetCN78+sfraoF+2z/CcPtR//u2P1f2J/RGQn8YMRcTAiHspjfzgiHomIQ2vk/+OLj77Te/4bK8t/vqvjv1oYi9Z32hdKZ374tqnTcjf5Z8f/WK00mb+znu+/9cTV29kMAAAA/z1pROyIJJ1aKafp1FT97+X3xLa0sri0/OTJxffOzdefESjHaFrc6Rov7ofm9z/LDfWZlvrR/L7x56WttfrU3GJlftDJw5Db3mH8Z/4oDTo6YMN5XguGl/EPw8v4h+Fl/MPwajP+tw4iDmDztfv9/3AAcQCbr2X8W/aDIeL6H4aX8Q/Dy/iHobS0NW7/kLzCsBS+ObzuxpHeITErbEhh0N9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fFPAAAA//+HbOWj") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) 1.762376651s ago: executing program 1 (id=6109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) rt_sigprocmask(0x2, &(0x7f0000000400)={[0x1]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000400)={[0xfffff7feffff7ffc]}, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xffffffff}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) 1.422642717s ago: executing program 6 (id=6123): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000940)={r2, &(0x7f0000000b40)="e678e6fb326fdc9130a26ba70442e00132eefb78bc7b673577de1337dd8416f0741fa8b734616524222ff3f534260e0704af7c0d668c7f66d6607790957d70fcf305003ec8f816bacb2929b1960831af3fcf1a87162687aeda4c09421846532d2cf81586f6a285181bc3169043edf6ec8e9f811af91ad9a8e9456cac4d1a9352f67be4b340ae8e2644d5a6d25d056e8df35c65aa5c12ba0fedc2d4396ef2c4a828e3c762608541e6e3e547dbcafb2fb0461c12c07d5a2e1ccf1296129e366a1139a8372750d48e"}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT=r0], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='kfree\x00', r5, 0x0, 0x9}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000cc0)={{}, 0x5, &(0x7f0000000c80)=[0x1, 0x100000000, 0x3, 0x7, 0x10000], 0x100000000}) r7 = fcntl$dupfd(r3, 0x0, r2) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) fcntl$lock(r8, 0x25, &(0x7f0000000d80)={0x0, 0x1, 0x4, 0x401}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000c40)=[@ioring_restriction_sqe_op={0x1, 0x6}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1af\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) 1.285834249s ago: executing program 6 (id=6129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 1.183840331s ago: executing program 6 (id=6131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000003c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x9, 0x7}]}) 1.129913922s ago: executing program 8 (id=6133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000001300)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @empty}, 0x4, 0x1, 0x1}}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000580)='ufshcd_exception_event\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) chdir(&(0x7f0000000380)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000002340)={0x217, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0x7) gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000008c0)=[{0xff, 0x52, 0xe, 0x9, @tick=0x9, {0xe, 0x7}, {0x5, 0x6}, @addr={0xeb, 0x2}}, {0x59, 0xfd, 0x8, 0x40, @tick=0xfffffffe, {0xfc}, {0x8, 0xd}, @result={0x5f583249, 0xc0b7}}, {0xd, 0xe, 0x3, 0x95, @time={0x3, 0x1ff}, {0x4, 0x40}, {0x6, 0x9}, @quote={{0x4, 0x40}, 0x1fa0, &(0x7f00000003c0)={0x0, 0x3, 0x2, 0x1, @time={0xc3, 0x9}, {0xb7, 0x9}, {0x1}, @note={0x7, 0x6, 0xa7, 0x6, 0x800}}}}, {0x42, 0x10, 0xc0, 0x8, @time={0x9e7}, {0x80, 0x8}, {0xc, 0x4}, @ext={0x3e, &(0x7f00000004c0)="54a451ea9bbe4592ca7592c9cb4c2b38a214e4656dc0e1bec3284f0aa338db809d4dfa531f9a4d4399911787ba22cf32598043da02a3105e8bc09a0524dd"}}, {0x2, 0x8, 0x9, 0xfc, @time={0xffff, 0x5}, {0x6, 0x12}, {0x8, 0x7}, @raw32={[0x256, 0x7, 0xffff]}}, {0x7, 0x4, 0x7, 0x80, @tick=0x3, {0x40, 0x7}, {0x5, 0x7}, @result={0x10, 0x7}}, {0x5, 0x1, 0x9, 0x4, @time={0xd, 0x13}, {0x7f, 0x5}, {0x7f, 0x18}, @raw8={"13c1342f1b0f438cd6b50ca6"}}, {0x80, 0x60, 0x9, 0x2, @time={0x800, 0x2}, {0x0, 0x2}, {0x8, 0x28}, @raw8={"d0a5428003ee779306635336"}}], 0xe0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x80000000000000}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 1.120907892s ago: executing program 8 (id=6135): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.094074712s ago: executing program 6 (id=6137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0x41, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0xfffffffffffffffe, 0x840000, 0xc, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = socket(0x2c, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 961.225904ms ago: executing program 6 (id=6143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ////8+wKHhUtID7hAOjFcXV2f8+nMsBIBLl3r/n+/A3mcLMBIKfY1AhAYZf/3/f9zpelDJQQAAAzcdGtKCqXs673pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea9YXWlsm514zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPf3AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvD+AYDAAAA6Na5Tm/N/znsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNe89eHulM/Xx8qlBxf3LFyJiNi/+eEy25pNRjIjrf09i/MR2SUSMDSD+4b2I+Ghe/KSZ1lHIvPiDeBPOiR+z2buQF//GAOLDVXa/efx5La//FeLZ1jy//41H/E/9g+p9/Iuj499Yj/5/s88YT73zs3LP+PcinhrPP/504ic94j/XZ/yvf+3goNe69EcRc53Pn9YR72SE41K5sbVTru8f3N7YWl6vrFe2FxcXXl56Zemlpfny2ka1kv2bG+M7T//8/bPafz338y/Jsund/udz9pf3mfSfd+4++HCncng6/q3ncuL/6sfZK07HL2RxPpWVm+vnOuXDdvmkZ376m2fOav/qcfuLD/P/f6vXTrud6ihP9/unAwBcgPr+weZytVrZHdlC8yr9EUhD4REsfGugO0zTNG32qZxV9yOin/0kMeCWFvLzOS70PAIM+8gEAAAM2vFJ/7AzAQAAAAAAAAAAAAAAAAAAgKvrMp6y1h3z+BHIySAeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/DQAA///dpdP7") 940.698975ms ago: executing program 8 (id=6144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x40, 0x3a, 0x0) 868.712856ms ago: executing program 8 (id=6145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f0000000880)) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240), 0x8, 0x0, 0x8002, 0x0, 0x4, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 835.014406ms ago: executing program 6 (id=6148): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 754.197658ms ago: executing program 8 (id=6152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 735.050638ms ago: executing program 8 (id=6154): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r0, 0xffffffffffffffff, 0x0) 630.545109ms ago: executing program 5 (id=6157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa11000300686173683a6e65742c6e657400000007050004"], 0x60}}, 0x0) r4 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x630e, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 529.227172ms ago: executing program 5 (id=6159): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 504.586712ms ago: executing program 5 (id=6160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") 422.100663ms ago: executing program 5 (id=6163): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r0 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x3bfd, 0x80, 0x3, 0x205}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 391.848064ms ago: executing program 5 (id=6164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 374.320464ms ago: executing program 5 (id=6165): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r1 = open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)={0xb}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) clock_adjtime(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x3) socket$unix(0x1, 0x1, 0x0) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) 353.289844ms ago: executing program 7 (id=6166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x68, 0x41, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0xfffffffffffffffe, 0x840000, 0xc, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = socket(0x2c, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_emit_ethernet(0x42, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f00000000c0)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) 268.807366ms ago: executing program 7 (id=6167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x40, 0x3a, 0x0) 189.721007ms ago: executing program 7 (id=6168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)="b8683479d02695f9b7574cb287c8ef937928593c37ef209a352fe91f22a390d607d06fb865ddff8e92f740d526d968ba377afc1c5272de26ebe78a7db04d10763f0c59b7b16e0fb6b2d8b58ac00279b6aa4db63376d5b5fa5fe53dbdf9661160d09f0fd2736e50acd16ed1544f9e105a198e1e566c0a169a88a6b51820dcfcb512e01003845cda792bc7b3839143b04b8518d988a78fb102ce0f4625fec07f3e771f7bbfbf6ded6a17afe2ba44d81503fc53e96310df610018fa428ea00c", 0xbe}], 0x1, &(0x7f0000000a00)=[{0x100, 0x111, 0xfffffffc, "121393f212f8ce5ce7e042a18f92e73a3f6e9879c6cc64ef6ab864ad657d6765701ee5d5be925dc8f2d438a0ae6a87892e9f246ca253253f5b8f40d569dad172329cda538b8830bb32bf662c101826d61c6fc79c30d677f6c0b8ecf19b2d7afa061a16bb1451fb86407b0d76e344f141c7b0b917aeebd278f9d59b971643400a2dace4781601284e97ab09fd4e5a019e0103a1e71a255d4592a10e9e2fada8a37a4400816d0078dbb511192dfc07dbc47630aaa139a95aff7fbb846e4939568df1eeea283e63bf4a7def67de5fafb8a8a915fa14f40c3d0910d9222a8b575ba8d9b30d4ef1e48d7915ef9d93fa"}], 0x100}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 185.796437ms ago: executing program 7 (id=6169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa11000300686173683a6e65742c6e657400000007050004"], 0x60}}, 0x0) r4 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x630e, 0x0, 0x0, 0x221}, &(0x7f0000000700)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 27.61284ms ago: executing program 7 (id=6170): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 7 (id=6171): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@int={0x3, 0x0, 0x0, 0x1, 0x300, 0x29, 0x0, 0x1e, 0x1}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) kernel console output (not intermixed with test programs): 993191][T18636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.011978][T18641] netlink: 'syz.8.5201': attribute type 1 has an invalid length. [ 431.031293][T18636] bond1 (unregistering): Released all slaves [ 431.043765][T18640] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5202: Failed to acquire dquot type 1 [ 431.056901][T18641] loop8: detected capacity change from 0 to 164 [ 431.064611][T18633] loop6: detected capacity change from 0 to 1024 [ 431.071183][T18640] EXT4-fs (loop5): 1 truncate cleaned up [ 431.077750][T18640] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.140755][T18633] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.5200: Allocating blocks 497-513 which overlap fs metadata [ 431.167371][T18633] EXT4-fs (loop6): pa ffff8881065c34d0: logic 16, phys. 145, len 23 [ 431.175569][T18633] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 431.187160][T18647] SELinux: syz.5.5203 (18647) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 431.257255][T18633] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 431.269649][T18633] EXT4-fs (loop6): This should not happen!! Data will be lost [ 431.269649][T18633] [ 431.279400][T18633] EXT4-fs (loop6): Total free blocks count 0 [ 431.285429][T18633] EXT4-fs (loop6): Free/Dirty block details [ 431.291398][T18633] EXT4-fs (loop6): free_blocks=16 [ 431.296621][T18633] EXT4-fs (loop6): dirty_blocks=0 [ 431.301658][T18633] EXT4-fs (loop6): Block reservation details [ 431.307711][T18633] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 431.568381][T18668] loop5: detected capacity change from 0 to 764 [ 431.669063][T18678] bond1: entered promiscuous mode [ 431.674216][T18678] bond1: entered allmulticast mode [ 431.693495][T18678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.713957][T18676] loop5: detected capacity change from 0 to 8192 [ 431.721319][T18680] netlink: 'syz.8.5215': attribute type 1 has an invalid length. [ 431.731177][T18680] loop8: detected capacity change from 0 to 164 [ 431.785564][T18678] bond1 (unregistering): Released all slaves [ 431.992202][T18689] bond1: entered promiscuous mode [ 431.997412][T18689] bond1: entered allmulticast mode [ 432.006739][T18689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.026417][T18695] netlink: 'syz.8.5218': attribute type 1 has an invalid length. [ 432.037698][T18689] bond1 (unregistering): Released all slaves [ 432.052845][T18695] loop8: detected capacity change from 0 to 164 [ 432.408650][T18711] loop6: detected capacity change from 0 to 764 [ 432.499533][T18720] loop6: detected capacity change from 0 to 512 [ 432.516272][T18720] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.525949][T18720] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 432.558738][T18720] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 432.573789][T18720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 432.582214][T18720] System zones: 0-2, 18-18, 34-34 [ 432.588304][T18720] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 432.606781][T18720] EXT4-fs (loop6): 1 truncate cleaned up [ 432.630028][T18730] loop7: detected capacity change from 0 to 1024 [ 432.648039][T18730] EXT4-fs: Ignoring removed orlov option [ 432.653869][T18730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.735007][T18744] loop6: detected capacity change from 0 to 1024 [ 432.752120][T18744] EXT4-fs: Ignoring removed orlov option [ 432.759303][T18747] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5240'. [ 432.768522][T18744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.831752][T18758] bond1: entered promiscuous mode [ 432.836944][T18758] bond1: entered allmulticast mode [ 432.842592][T18758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.878121][T18765] netlink: 'syz.5.5243': attribute type 1 has an invalid length. [ 432.878761][T18758] bond1 (unregistering): Released all slaves [ 432.896306][T18768] loop8: detected capacity change from 0 to 128 [ 432.905541][T18768] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.909947][T18769] loop6: detected capacity change from 0 to 512 [ 432.947930][T18769] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.957087][T18769] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 432.966004][T18765] loop5: detected capacity change from 0 to 164 [ 432.996038][T18769] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 433.010392][T18769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 433.036589][T18769] System zones: 0-2, 18-18, 34-34 [ 433.048697][T18769] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 433.068379][T18769] EXT4-fs (loop6): 1 truncate cleaned up [ 433.075414][T18776] SELinux: syz.7.5250 (18776) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 433.166125][T18781] lo speed is unknown, defaulting to 1000 [ 433.676856][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 433.676873][ T29] audit: type=1326 audit(1743893284.829:23849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18804 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 433.708080][ T29] audit: type=1326 audit(1743893284.859:23850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18804 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 433.731858][ T29] audit: type=1326 audit(1743893284.859:23851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18804 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 433.755447][ T29] audit: type=1326 audit(1743893284.859:23852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18804 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 433.779284][ T29] audit: type=1326 audit(1743893284.859:23853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18804 comm="syz.5.5256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 433.815442][T18807] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5257'. [ 433.840052][ T29] audit: type=1326 audit(1743893284.909:23854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18808 comm="syz.1.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 433.863809][ T29] audit: type=1326 audit(1743893284.909:23855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18808 comm="syz.1.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 433.887462][ T29] audit: type=1326 audit(1743893284.909:23856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18808 comm="syz.1.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 433.911323][ T29] audit: type=1326 audit(1743893284.909:23857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18808 comm="syz.1.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 433.934971][ T29] audit: type=1326 audit(1743893284.909:23858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18808 comm="syz.1.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 433.985289][T18812] bond1: entered promiscuous mode [ 433.990396][T18812] bond1: entered allmulticast mode [ 433.994438][T18819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18819 comm=syz.8.5260 [ 434.006177][T18812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.008180][T18819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18819 comm=syz.8.5260 [ 434.032114][T18821] netlink: 'syz.7.5259': attribute type 1 has an invalid length. [ 434.051832][T18812] bond1 (unregistering): Released all slaves [ 434.065131][T18821] loop7: detected capacity change from 0 to 164 [ 434.076497][T18818] netlink: 'syz.1.5262': attribute type 10 has an invalid length. [ 434.107633][T18816] bond1: entered promiscuous mode [ 434.112728][T18816] bond1: entered allmulticast mode [ 434.118404][T18816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.121664][T18827] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 434.153639][T18829] netlink: 'syz.6.5261': attribute type 1 has an invalid length. [ 434.163821][T18829] loop6: detected capacity change from 0 to 164 [ 434.197768][T18816] bond1 (unregistering): Released all slaves [ 434.317837][T18843] loop8: detected capacity change from 0 to 512 [ 434.328084][T18843] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.337377][T18843] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 434.349461][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5265'. [ 434.366735][T18843] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 434.379194][T18830] loop5: detected capacity change from 0 to 512 [ 434.429859][T18843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 434.458534][T18843] System zones: 0-2, 18-18, 34-34 [ 434.468560][T18830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 434.479699][T18843] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 434.496088][T18830] EXT4-fs (loop5): 1 truncate cleaned up [ 434.502576][T18843] EXT4-fs (loop8): 1 truncate cleaned up [ 434.708991][T18868] loop5: detected capacity change from 0 to 512 [ 434.739567][T18868] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5278: Failed to acquire dquot type 1 [ 434.762864][T18868] EXT4-fs (loop5): 1 truncate cleaned up [ 434.769635][T18868] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.857501][T18878] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5282'. [ 434.897008][T18880] loop7: detected capacity change from 0 to 512 [ 434.917852][T18880] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 434.927458][T18880] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 434.938921][T18880] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 434.948267][T18880] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 434.957037][T18880] System zones: 0-2, 18-18, 34-34 [ 434.962807][T18880] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 434.979964][T18880] EXT4-fs (loop7): 1 truncate cleaned up [ 435.157602][T18903] loop7: detected capacity change from 0 to 512 [ 435.187076][T18903] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5293: Failed to acquire dquot type 1 [ 435.208394][T18903] EXT4-fs (loop7): 1 truncate cleaned up [ 435.215123][T18903] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.417296][T18918] loop5: detected capacity change from 0 to 8192 [ 435.650130][T18922] loop8: detected capacity change from 0 to 764 [ 435.831230][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18932 comm=syz.8.5306 [ 435.844042][T18932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18932 comm=syz.8.5306 [ 435.936793][T18937] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 435.988219][T18940] rdma_rxe: rxe_newlink: failed to add bond0 [ 436.004678][T18940] loop7: detected capacity change from 0 to 1024 [ 436.012464][T18940] EXT4-fs: Ignoring removed nobh option [ 436.018207][T18940] EXT4-fs: Ignoring removed bh option [ 436.029848][T18945] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5310'. [ 436.079575][T18935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.089455][T18935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.130153][T18935] ALSA: seq fatal error: cannot create timer (-19) [ 436.158437][T18935] lo speed is unknown, defaulting to 1000 [ 436.172791][T18952] bond1: entered promiscuous mode [ 436.178045][T18952] bond1: entered allmulticast mode [ 436.184294][T18952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.202267][T18952] bond1 (unregistering): Released all slaves [ 436.224071][T18955] netlink: 'syz.6.5312': attribute type 1 has an invalid length. [ 436.244568][T18955] loop6: detected capacity change from 0 to 164 [ 436.276903][T18957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18957 comm=syz.8.5313 [ 436.289611][T18957] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18957 comm=syz.8.5313 [ 436.395619][T18967] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 436.443634][T18972] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5318'. [ 436.542958][T18982] bond1: entered promiscuous mode [ 436.548202][T18982] bond1: entered allmulticast mode [ 436.554489][T18982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.572857][T18982] bond1 (unregistering): Released all slaves [ 436.591844][T18986] netlink: 'syz.8.5325': attribute type 1 has an invalid length. [ 436.644314][T18982] loop8: detected capacity change from 0 to 164 [ 436.688386][T18989] loop8: detected capacity change from 0 to 512 [ 436.730721][T18989] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5327: Failed to acquire dquot type 1 [ 436.755511][T18989] EXT4-fs (loop8): 1 truncate cleaned up [ 436.761714][T18989] EXT4-fs mount: 67 callbacks suppressed [ 436.761729][T18989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.795982][T18989] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.811051][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.836655][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.907035][T19003] rdma_rxe: rxe_newlink: failed to add bond0 [ 436.912097][T19002] loop8: detected capacity change from 0 to 764 [ 436.935566][T19000] loop7: detected capacity change from 0 to 4096 [ 436.943791][T19000] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 436.957637][T19003] loop5: detected capacity change from 0 to 1024 [ 436.973091][T19003] EXT4-fs: Ignoring removed nobh option [ 436.973120][T19003] EXT4-fs: Ignoring removed bh option [ 437.099257][T19003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.126942][T19003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.127128][T19003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.151128][T19003] ALSA: seq fatal error: cannot create timer (-19) [ 437.163222][T19003] lo speed is unknown, defaulting to 1000 [ 437.171463][T19018] loop7: detected capacity change from 0 to 128 [ 437.329275][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5332'. [ 437.378306][T19005] loop8: detected capacity change from 0 to 512 [ 437.388440][T19005] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 437.422763][T19005] EXT4-fs (loop8): 1 truncate cleaned up [ 437.430525][T19005] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.468530][T19032] loop6: detected capacity change from 0 to 512 [ 437.496983][T19032] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5341: Failed to acquire dquot type 1 [ 437.516217][T19032] EXT4-fs (loop6): 1 truncate cleaned up [ 437.522384][T19032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.535794][T19032] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.536834][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.601079][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.629970][T19042] loop6: detected capacity change from 0 to 764 [ 437.684945][T19049] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.745943][T19049] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.815848][T19049] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.826253][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.883578][T19068] bond1: entered promiscuous mode [ 437.888695][T19068] bond1: entered allmulticast mode [ 437.897583][T19068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.924137][T19074] netlink: 'syz.8.5354': attribute type 1 has an invalid length. [ 437.938241][T19068] bond1 (unregistering): Released all slaves [ 437.949658][T19074] loop8: detected capacity change from 0 to 164 [ 437.988660][T19049] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.040592][T19076] loop6: detected capacity change from 0 to 764 [ 438.095151][T19049] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.117601][T19049] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.140462][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5353'. [ 438.164255][T19049] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.179775][T19049] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.198160][T19073] loop5: detected capacity change from 0 to 512 [ 438.213765][T19082] hub 2-0:1.0: USB hub found [ 438.218604][T19082] hub 2-0:1.0: 8 ports detected [ 438.230616][T19073] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 438.300943][T19090] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5358'. [ 438.496561][T19073] EXT4-fs (loop5): 1 truncate cleaned up [ 438.502853][T19073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.656489][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.735500][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 438.735582][ T29] audit: type=1326 audit(1743893289.889:24587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.1.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 438.776743][ T29] audit: type=1326 audit(1743893289.889:24588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.1.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 438.801395][ T29] audit: type=1326 audit(1743893289.889:24589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.1.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 438.825706][ T29] audit: type=1326 audit(1743893289.889:24590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19119 comm="syz.1.5372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 438.849638][ T29] audit: type=1326 audit(1743893289.889:24591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.7.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 438.873281][ T29] audit: type=1326 audit(1743893289.889:24592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.7.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 438.897012][ T29] audit: type=1326 audit(1743893289.889:24593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.7.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 438.920572][ T29] audit: type=1326 audit(1743893289.889:24594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.7.5374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 438.944567][ T29] audit: type=1326 audit(1743893289.919:24595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19122 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 438.968354][ T29] audit: type=1326 audit(1743893289.919:24596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19122 comm="syz.5.5371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 438.968895][T19133] netlink: 'syz.7.5377': attribute type 1 has an invalid length. [ 439.008808][T19128] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.041204][T19136] loop7: detected capacity change from 0 to 164 [ 439.055224][T19130] bond1: entered promiscuous mode [ 439.060331][T19130] bond1: entered allmulticast mode [ 439.071869][T19130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.083112][T19130] bond1 (unregistering): Released all slaves [ 439.095647][T19128] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.140881][T19145] loop7: detected capacity change from 0 to 512 [ 439.147796][T19145] EXT4-fs: Ignoring removed oldalloc option [ 439.155703][T19145] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 439.167040][T19128] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.184219][T19145] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.5383: invalid indirect mapped block 4294967295 (level 0) [ 439.199382][T19145] EXT4-fs (loop7): Remounting filesystem read-only [ 439.209991][T19145] EXT4-fs (loop7): 1 orphan inode deleted [ 439.215951][T19145] EXT4-fs (loop7): 1 truncate cleaned up [ 439.227229][T19145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.241965][T19128] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.292514][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.441504][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5384'. [ 439.474621][T19160] loop7: detected capacity change from 0 to 4096 [ 439.485925][T19151] loop5: detected capacity change from 0 to 512 [ 439.494413][T19160] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 439.503575][T19151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 439.529414][T19151] EXT4-fs (loop5): 1 truncate cleaned up [ 439.555579][T19151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.650983][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.763961][T19174] bond1: entered promiscuous mode [ 439.769073][T19174] bond1: entered allmulticast mode [ 439.780713][T19174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.862834][T19170] loop8: detected capacity change from 0 to 512 [ 439.871963][T19172] netlink: 'syz.5.5391': attribute type 1 has an invalid length. [ 439.873142][T19170] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 439.897639][T19172] loop5: detected capacity change from 0 to 164 [ 439.898260][T19170] EXT4-fs (loop8): 1 truncate cleaned up [ 439.914076][T19174] bond1 (unregistering): Released all slaves [ 439.924179][T19170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.045478][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.437818][T19220] netlink: 'syz.7.5407': attribute type 10 has an invalid length. [ 440.451547][T19220] netlink: 'syz.7.5407': attribute type 10 has an invalid length. [ 440.459904][T19220] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5407'. [ 440.566370][T19224] loop8: detected capacity change from 0 to 4096 [ 440.589877][T19224] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 440.640237][T19230] netlink: 'syz.6.5414': attribute type 10 has an invalid length. [ 440.916751][T19252] loop5: detected capacity change from 0 to 128 [ 440.925888][T19252] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.938438][T19252] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 441.199411][T19255] lo speed is unknown, defaulting to 1000 [ 441.554970][T19263] loop8: detected capacity change from 0 to 764 [ 441.875554][T16151] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.906905][T19288] bond1: entered promiscuous mode [ 441.912085][T19288] bond1: entered allmulticast mode [ 441.918373][T19288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.929282][T19286] hub 2-0:1.0: USB hub found [ 441.937358][T19286] hub 2-0:1.0: 8 ports detected [ 441.937615][T19288] bond1 (unregistering): Released all slaves [ 441.952345][T19290] netlink: 'syz.5.5434': attribute type 1 has an invalid length. [ 441.960855][T19286] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5435'. [ 441.972249][T19290] loop5: detected capacity change from 0 to 164 [ 442.002210][T19292] loop8: detected capacity change from 0 to 764 [ 442.193276][T19311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19311 comm=syz.8.5441 [ 442.205988][T19311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19311 comm=syz.8.5441 [ 442.267522][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5442'. [ 442.280439][T19310] loop5: detected capacity change from 0 to 512 [ 442.287772][T19310] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 442.298104][T19312] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 442.299431][T19310] EXT4-fs (loop5): 1 truncate cleaned up [ 442.311408][T19310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.351754][T19315] bond1: entered promiscuous mode [ 442.356998][T19315] bond1: entered allmulticast mode [ 442.362548][T19315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.380030][T19315] bond1 (unregistering): Released all slaves [ 442.381121][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.396926][T19318] netlink: 'syz.8.5443': attribute type 1 has an invalid length. [ 442.408418][T19318] loop8: detected capacity change from 0 to 164 [ 442.455140][T19325] loop8: detected capacity change from 0 to 1024 [ 442.462082][T19325] EXT4-fs: Ignoring removed orlov option [ 442.468622][T19325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.497144][T19325] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.533089][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.752258][T19351] bond1: entered promiscuous mode [ 442.757394][T19351] bond1: entered allmulticast mode [ 442.762952][T19347] loop5: detected capacity change from 0 to 512 [ 442.766929][T19351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 442.770855][T19347] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 442.784848][T19354] netlink: 'syz.8.5457': attribute type 1 has an invalid length. [ 442.796428][T19347] EXT4-fs (loop5): 1 truncate cleaned up [ 442.796608][T19354] loop8: detected capacity change from 0 to 164 [ 442.802474][T19347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.825005][T19351] bond1 (unregistering): Released all slaves [ 442.904956][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.968420][T19128] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.992652][T19128] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.007805][T19128] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.035994][T19128] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.188652][T19382] loop1: detected capacity change from 0 to 512 [ 443.197737][T19386] loop5: detected capacity change from 0 to 764 [ 443.217841][T19384] bond1: entered promiscuous mode [ 443.222992][T19384] bond1: entered allmulticast mode [ 443.228573][T19384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.238982][T19382] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5467: Failed to acquire dquot type 1 [ 443.251504][T19382] EXT4-fs (loop1): 1 truncate cleaned up [ 443.257744][T19384] bond1 (unregistering): Released all slaves [ 443.258193][T19382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.277310][T19382] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.278342][T19392] netlink: 'syz.8.5468': attribute type 1 has an invalid length. [ 443.299597][T19392] loop8: detected capacity change from 0 to 164 [ 443.316993][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.450800][T19404] loop1: detected capacity change from 0 to 512 [ 443.460422][T19404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 443.484945][T19408] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5476'. [ 443.498461][T19404] EXT4-fs (loop1): 1 truncate cleaned up [ 443.506322][T19404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.540972][T19408] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.551866][T19412] loop5: detected capacity change from 0 to 4096 [ 443.560628][T19412] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 443.640928][T19408] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.688408][T19422] loop6: detected capacity change from 0 to 512 [ 443.701265][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.730244][T19422] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5480: Failed to acquire dquot type 1 [ 443.753074][T19422] EXT4-fs (loop6): 1 truncate cleaned up [ 443.761470][ T29] kauditd_printk_skb: 841 callbacks suppressed [ 443.761488][ T29] audit: type=1326 audit(1743893294.919:25434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 443.795489][T19408] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.802629][T19422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.808047][ T29] audit: type=1326 audit(1743893294.919:25435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 443.842043][ T29] audit: type=1326 audit(1743893294.919:25436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58e191d1a3 code=0x7ffc0000 [ 443.865572][ T29] audit: type=1326 audit(1743893294.929:25437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58e191bc1f code=0x7ffc0000 [ 443.874698][T19427] loop5: detected capacity change from 0 to 128 [ 443.889040][ T29] audit: type=1326 audit(1743893294.929:25438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f58e191d1f7 code=0x7ffc0000 [ 443.889663][ T29] audit: type=1326 audit(1743893295.019:25439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58e191bad0 code=0x7ffc0000 [ 443.889699][ T29] audit: type=1326 audit(1743893295.019:25440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58e191cd6b code=0x7ffc0000 [ 443.923617][T19422] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.052214][T19433] bond2: entered promiscuous mode [ 444.052237][T19433] bond2: entered allmulticast mode [ 444.052391][T19433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.094137][T19439] netlink: 'syz.1.5483': attribute type 1 has an invalid length. [ 444.104649][ T29] audit: type=1326 audit(1743893295.249:25441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58e191bdca code=0x7ffc0000 [ 444.128383][ T29] audit: type=1326 audit(1743893295.249:25442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58e191bdca code=0x7ffc0000 [ 444.137741][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.151935][ T29] audit: type=1326 audit(1743893295.249:25443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19411 comm="syz.5.5477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f58e191b9d7 code=0x7ffc0000 [ 444.187642][T19440] loop1: detected capacity change from 0 to 164 [ 444.203451][T19433] bond2 (unregistering): Released all slaves [ 444.237644][T19408] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.272428][T19454] netlink: 'syz.6.5484': attribute type 10 has an invalid length. [ 444.286140][T19454] netlink: 'syz.6.5484': attribute type 10 has an invalid length. [ 444.294055][T19454] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5484'. [ 444.346437][T19458] loop8: detected capacity change from 0 to 512 [ 444.353327][T19458] EXT4-fs: Ignoring removed oldalloc option [ 444.369703][T19458] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 444.415033][T19408] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.428932][T19408] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.442223][T19458] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.5489: invalid indirect mapped block 4294967295 (level 0) [ 444.466092][T19408] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.478192][T19461] netlink: 'syz.5.5490': attribute type 10 has an invalid length. [ 444.486634][T19458] EXT4-fs (loop8): Remounting filesystem read-only [ 444.493174][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5488'. [ 444.493687][T19458] EXT4-fs (loop8): 1 orphan inode deleted [ 444.507976][T19458] EXT4-fs (loop8): 1 truncate cleaned up [ 444.513535][T19408] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.522658][T19458] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.539205][T19456] loop1: detected capacity change from 0 to 512 [ 444.553728][T19456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 444.578195][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.607289][T19456] EXT4-fs (loop1): 1 truncate cleaned up [ 444.613694][T19456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.700787][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.791703][T19481] bond1: entered promiscuous mode [ 444.796849][T19481] bond1: entered allmulticast mode [ 444.802406][T19481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.819096][T19481] bond1 (unregistering): Released all slaves [ 444.835804][T19488] netlink: 'syz.7.5498': attribute type 1 has an invalid length. [ 444.857673][T19488] loop7: detected capacity change from 0 to 164 [ 444.969737][T19493] loop8: detected capacity change from 0 to 512 [ 444.990898][T19493] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5502: Failed to acquire dquot type 1 [ 445.003118][T19498] loop7: detected capacity change from 0 to 512 [ 445.004619][T19493] EXT4-fs (loop8): 1 truncate cleaned up [ 445.015593][T19493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.026932][T19498] EXT4-fs: Ignoring removed oldalloc option [ 445.028794][T19493] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.049318][T19498] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 445.064476][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.088890][T19498] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.5503: invalid indirect mapped block 4294967295 (level 0) [ 445.115766][T19498] EXT4-fs (loop7): Remounting filesystem read-only [ 445.122652][T19498] EXT4-fs (loop7): 1 orphan inode deleted [ 445.124190][T19503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19503 comm=syz.8.5504 [ 445.128526][T19498] EXT4-fs (loop7): 1 truncate cleaned up [ 445.140996][T19503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19503 comm=syz.8.5504 [ 445.159928][T19498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.192817][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.227933][T19509] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 445.358585][T19521] bond1: entered promiscuous mode [ 445.363867][T19521] bond1: entered allmulticast mode [ 445.369406][T19521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.380186][T19521] bond1 (unregistering): Released all slaves [ 445.394120][T19524] netlink: 'syz.7.5511': attribute type 1 has an invalid length. [ 445.408500][T19524] loop7: detected capacity change from 0 to 164 [ 445.441140][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5510'. [ 445.467434][T19517] loop1: detected capacity change from 0 to 512 [ 445.476422][T19517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 445.480096][T19529] loop8: detected capacity change from 0 to 512 [ 445.491387][T19517] EXT4-fs (loop1): 1 truncate cleaned up [ 445.499685][T19517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.514498][T19529] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5514: Failed to acquire dquot type 1 [ 445.526641][T19529] EXT4-fs (loop8): 1 truncate cleaned up [ 445.532695][T19529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.546155][T19529] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.572023][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.590370][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.605648][T19534] loop1: detected capacity change from 0 to 512 [ 445.618026][T19536] loop7: detected capacity change from 0 to 512 [ 445.624732][T19536] EXT4-fs: Ignoring removed oldalloc option [ 445.631111][T19536] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 445.647650][T19534] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5515: Failed to acquire dquot type 1 [ 445.661104][T19536] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.5517: invalid indirect mapped block 4294967295 (level 0) [ 445.681297][T19534] EXT4-fs (loop1): 1 truncate cleaned up [ 445.687465][T19534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.703926][T19536] EXT4-fs (loop7): Remounting filesystem read-only [ 445.710663][T19536] EXT4-fs (loop7): 1 orphan inode deleted [ 445.712593][T19534] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.716488][T19536] EXT4-fs (loop7): 1 truncate cleaned up [ 445.733750][T19536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.771161][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.791601][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.810438][T19550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19550 comm=syz.1.5519 [ 445.823114][T19550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19550 comm=syz.1.5519 [ 445.930072][T19561] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 445.963845][T19563] bond1: entered promiscuous mode [ 445.968967][T19563] bond1: entered allmulticast mode [ 445.975769][T19563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.994483][T19563] bond1 (unregistering): Released all slaves [ 446.011139][T19565] netlink: 'syz.8.5527': attribute type 1 has an invalid length. [ 446.024881][T19567] loop1: detected capacity change from 0 to 512 [ 446.034090][T19565] loop8: detected capacity change from 0 to 164 [ 446.081095][T19567] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5528: Failed to acquire dquot type 1 [ 446.093318][T19572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5526'. [ 446.096293][T19567] EXT4-fs (loop1): 1 truncate cleaned up [ 446.112554][T19567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.125685][T19567] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.154224][T19574] hub 2-0:1.0: USB hub found [ 446.159223][T19574] hub 2-0:1.0: 8 ports detected [ 446.170069][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.207674][T19574] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5530'. [ 446.229271][T19580] loop1: detected capacity change from 0 to 512 [ 446.256532][T19578] loop7: detected capacity change from 0 to 512 [ 446.264831][T19578] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 446.274879][T19580] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5531: Failed to acquire dquot type 1 [ 446.287044][T19580] EXT4-fs (loop1): 1 truncate cleaned up [ 446.292312][T19578] EXT4-fs (loop7): 1 truncate cleaned up [ 446.293158][T19580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.304571][T19578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.316428][T19580] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.355553][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.414129][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.415168][T19595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19595 comm=syz.7.5538 [ 446.435813][T19595] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19595 comm=syz.7.5538 [ 446.543568][T19600] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 446.662675][T19607] hub 2-0:1.0: USB hub found [ 446.667653][T19607] hub 2-0:1.0: 8 ports detected [ 446.719595][T19607] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5543'. [ 446.906055][T19630] loop1: detected capacity change from 0 to 512 [ 446.938510][T19630] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5552: Failed to acquire dquot type 1 [ 446.953326][T19630] EXT4-fs (loop1): 1 truncate cleaned up [ 446.959980][T19630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.972625][T19630] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.997238][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.057488][T19644] hub 2-0:1.0: USB hub found [ 447.062238][T19644] hub 2-0:1.0: 8 ports detected [ 447.077055][T19644] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5556'. [ 447.272621][T19660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5563'. [ 447.299426][T19663] loop7: detected capacity change from 0 to 512 [ 447.349469][T19663] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5564: Failed to acquire dquot type 1 [ 447.365070][T19663] EXT4-fs (loop7): 1 truncate cleaned up [ 447.399070][T19663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.422589][T19663] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.509767][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.528481][T19676] loop6: detected capacity change from 0 to 1024 [ 447.557200][T19676] EXT4-fs: Ignoring removed orlov option [ 447.563014][T19676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 447.591507][T19676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.619169][T19686] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5571'. [ 447.642095][T19686] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.676131][T19697] netlink: 'syz.1.5573': attribute type 10 has an invalid length. [ 447.696292][T19697] netlink: 'syz.1.5573': attribute type 10 has an invalid length. [ 447.733811][T19686] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.775771][T19708] bond1: entered promiscuous mode [ 447.780869][T19708] bond1: entered allmulticast mode [ 447.787939][T19708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.801804][T19708] bond1 (unregistering): Released all slaves [ 447.812590][T19686] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.823215][T19710] loop8: detected capacity change from 0 to 164 [ 447.865708][T19712] bond1: entered promiscuous mode [ 447.870856][T19712] bond1: entered allmulticast mode [ 447.876714][T19712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.899280][T19712] bond1 (unregistering): Released all slaves [ 447.910271][T19686] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.926317][T19717] loop5: detected capacity change from 0 to 164 [ 448.223160][T19744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19744 comm=syz.8.5591 [ 448.236042][T19744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19744 comm=syz.8.5591 [ 448.282942][T19746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19746 comm=syz.5.5592 [ 448.295592][T19746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19746 comm=syz.5.5592 [ 448.341474][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.351541][T19747] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 448.366578][T19748] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 448.383383][T19750] validate_nla: 3 callbacks suppressed [ 448.383399][T19750] netlink: 'syz.6.5593': attribute type 10 has an invalid length. [ 448.520658][T19763] bond1: entered promiscuous mode [ 448.525796][T19763] bond1: entered allmulticast mode [ 448.531188][T19763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.544169][T19763] bond1 (unregistering): Released all slaves [ 448.558714][T19771] netlink: 'syz.5.5600': attribute type 1 has an invalid length. [ 448.569050][T19771] loop5: detected capacity change from 0 to 164 [ 448.578806][T19768] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.589796][T19773] loop8: detected capacity change from 0 to 512 [ 448.608466][T19773] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5603: Failed to acquire dquot type 1 [ 448.621784][T19773] EXT4-fs (loop8): 1 truncate cleaned up [ 448.630201][T19773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.648990][T19773] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.656905][T19686] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.681508][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.684959][T19777] loop5: detected capacity change from 0 to 4096 [ 448.697675][T19777] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 448.708285][T19768] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.737426][T19686] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.747951][T19779] netlink: 'syz.8.5605': attribute type 10 has an invalid length. [ 448.754848][T19686] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.765348][ T29] kauditd_printk_skb: 896 callbacks suppressed [ 448.765366][ T29] audit: type=1326 audit(1743893299.919:26324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19778 comm="syz.8.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 448.769335][T19686] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.809846][ T29] audit: type=1326 audit(1743893299.959:26325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19778 comm="syz.8.5605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 448.836879][T19768] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.883091][T19785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19785 comm=syz.7.5607 [ 448.895793][T19785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19785 comm=syz.7.5607 [ 448.910170][ T29] audit: type=1326 audit(1743893300.059:26326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 448.934621][ T29] audit: type=1326 audit(1743893300.059:26327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f58e191d169 code=0x7ffc0000 [ 448.958873][ T29] audit: type=1326 audit(1743893300.059:26328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f58e191d1a3 code=0x7ffc0000 [ 448.982408][ T29] audit: type=1326 audit(1743893300.069:26329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58e191bc1f code=0x7ffc0000 [ 448.998126][T19786] loop5: detected capacity change from 0 to 128 [ 449.016144][ T29] audit: type=1326 audit(1743893300.109:26330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f58e191d1f7 code=0x7ffc0000 [ 449.019684][T19787] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 449.039778][ T29] audit: type=1326 audit(1743893300.139:26331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58e191bad0 code=0x7ffc0000 [ 449.070770][ T29] audit: type=1326 audit(1743893300.149:26332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58e191cd6b code=0x7ffc0000 [ 449.100353][ T29] audit: type=1326 audit(1743893300.219:26333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.5.5604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58e191bdca code=0x7ffc0000 [ 449.101366][T19768] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.147375][T19789] loop7: detected capacity change from 0 to 512 [ 449.154128][T19789] EXT4-fs: Ignoring removed oldalloc option [ 449.160526][T19789] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 449.171863][T19789] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.5608: invalid indirect mapped block 4294967295 (level 0) [ 449.189363][T19789] EXT4-fs (loop7): Remounting filesystem read-only [ 449.195469][T19768] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.196153][T19789] EXT4-fs (loop7): 1 orphan inode deleted [ 449.209904][T19789] EXT4-fs (loop7): 1 truncate cleaned up [ 449.214229][T19768] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.216123][T19789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.232113][T19768] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.253059][T19768] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.261912][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.282256][T19792] __nla_validate_parse: 2 callbacks suppressed [ 449.282273][T19792] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5609'. [ 449.323294][T19794] loop7: detected capacity change from 0 to 512 [ 449.347903][T19794] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5610: Failed to acquire dquot type 1 [ 449.362523][T19794] EXT4-fs (loop7): 1 truncate cleaned up [ 449.369012][T19794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.379557][T19800] loop6: detected capacity change from 0 to 512 [ 449.381744][T19794] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.392337][T19800] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 449.413688][T19800] EXT4-fs (loop6): 1 truncate cleaned up [ 449.516229][T19815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19815 comm=syz.7.5618 [ 449.528944][T19815] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19815 comm=syz.7.5618 [ 449.577513][T19817] loop5: detected capacity change from 0 to 512 [ 449.584252][T19817] EXT4-fs: Ignoring removed oldalloc option [ 449.590560][T19817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 449.601990][T19820] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5621'. [ 449.612323][T19817] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5620: invalid indirect mapped block 4294967295 (level 0) [ 449.626590][T19821] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 449.630903][T19817] EXT4-fs (loop5): Remounting filesystem read-only [ 449.640525][T19817] EXT4-fs (loop5): 1 orphan inode deleted [ 449.646377][T19817] EXT4-fs (loop5): 1 truncate cleaned up [ 449.706049][T19827] bond1: entered promiscuous mode [ 449.711142][T19827] bond1: entered allmulticast mode [ 449.717134][T19827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.728723][T19827] bond1 (unregistering): Released all slaves [ 449.746892][T19829] bond1: entered promiscuous mode [ 449.751986][T19829] bond1: entered allmulticast mode [ 449.758139][T19829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.758214][T19835] netlink: 'syz.6.5625': attribute type 1 has an invalid length. [ 449.772686][T19834] netlink: 'syz.7.5624': attribute type 1 has an invalid length. [ 449.779034][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5627'. [ 449.791021][T19834] loop7: detected capacity change from 0 to 164 [ 449.814997][T19829] bond1 (unregistering): Released all slaves [ 449.825232][T19839] loop6: detected capacity change from 0 to 164 [ 449.863018][T19844] loop7: detected capacity change from 0 to 1024 [ 449.870192][T19844] EXT4-fs: Ignoring removed orlov option [ 449.877070][T19844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.907286][T19846] hub 2-0:1.0: USB hub found [ 449.912150][T19846] hub 2-0:1.0: 8 ports detected [ 449.914798][T19850] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5632'. [ 449.943508][T19853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19853 comm=syz.6.5633 [ 449.956171][T19853] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19853 comm=syz.6.5633 [ 449.969063][T19846] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5631'. [ 450.006604][T19857] bond1: entered promiscuous mode [ 450.011773][T19857] bond1: entered allmulticast mode [ 450.017264][T19857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.034706][T19857] bond1 (unregistering): Released all slaves [ 450.048706][T19861] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 450.056382][T19862] netlink: 'syz.5.5634': attribute type 1 has an invalid length. [ 450.083826][T19862] loop5: detected capacity change from 0 to 164 [ 450.178473][T19873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5638'. [ 450.224079][T19877] loop6: detected capacity change from 0 to 512 [ 450.259671][T19877] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5639: Failed to acquire dquot type 1 [ 450.272319][T19877] EXT4-fs (loop6): 1 truncate cleaned up [ 450.277298][T19883] bond1: entered promiscuous mode [ 450.283070][T19877] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.293613][T19883] bond1: entered allmulticast mode [ 450.299167][T19883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.308357][T19885] netlink: 'syz.5.5642': attribute type 1 has an invalid length. [ 450.318399][T19883] bond1 (unregistering): Released all slaves [ 450.325034][T19885] loop5: detected capacity change from 0 to 164 [ 450.341927][T19887] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5643'. [ 450.398489][T19889] hub 2-0:1.0: USB hub found [ 450.403586][T19889] hub 2-0:1.0: 8 ports detected [ 450.438879][T19889] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5644'. [ 450.479493][T19895] loop6: detected capacity change from 0 to 764 [ 450.542916][T19900] loop5: detected capacity change from 0 to 512 [ 450.544545][T19897] bond1: entered promiscuous mode [ 450.550027][T19900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 450.554339][T19897] bond1: entered allmulticast mode [ 450.569702][T19897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.576851][T19902] netlink: 'syz.6.5647': attribute type 1 has an invalid length. [ 450.581219][T19900] EXT4-fs (loop5): 1 truncate cleaned up [ 450.599274][T19902] loop6: detected capacity change from 0 to 164 [ 450.624354][T19897] bond1 (unregistering): Released all slaves [ 450.686314][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5649'. [ 450.761209][T19913] loop1: detected capacity change from 0 to 512 [ 450.765569][T19916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5654'. [ 450.834396][T19913] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5653: Failed to acquire dquot type 1 [ 450.887479][T19913] EXT4-fs (loop1): 1 truncate cleaned up [ 450.902269][T19913] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.929650][T19928] loop5: detected capacity change from 0 to 512 [ 450.971751][T19928] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5657: Failed to acquire dquot type 1 [ 450.984559][T19928] EXT4-fs (loop5): 1 truncate cleaned up [ 450.990741][T19928] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.001685][T19938] loop1: detected capacity change from 0 to 764 [ 451.002546][T19939] netlink: 'syz.7.5658': attribute type 10 has an invalid length. [ 451.027911][T19940] netlink: 'syz.6.5660': attribute type 1 has an invalid length. [ 451.039717][T19936] bond1: entered promiscuous mode [ 451.044843][T19936] bond1: entered allmulticast mode [ 451.045972][T19940] loop6: detected capacity change from 0 to 164 [ 451.056951][T19936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.081071][T19936] bond1 (unregistering): Released all slaves [ 451.099607][T19945] loop1: detected capacity change from 0 to 1024 [ 451.120337][T19945] EXT4-fs: Ignoring removed orlov option [ 451.126348][T19945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 451.168814][T19950] bond1: entered promiscuous mode [ 451.174100][T19950] bond1: entered allmulticast mode [ 451.179584][T19950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.191421][T19950] bond1 (unregistering): Released all slaves [ 451.212973][T19955] loop6: detected capacity change from 0 to 164 [ 451.582397][T19980] loop5: detected capacity change from 0 to 4096 [ 451.590077][T19980] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 451.647820][T19972] loop6: detected capacity change from 0 to 512 [ 451.654993][T19972] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 451.666654][T19972] EXT4-fs (loop6): 1 truncate cleaned up [ 451.729998][T19985] loop6: detected capacity change from 0 to 512 [ 451.737178][T19985] EXT4-fs: Ignoring removed oldalloc option [ 451.749251][T19985] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 451.776709][T19985] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.5674: invalid indirect mapped block 4294967295 (level 0) [ 451.791917][T19985] EXT4-fs (loop6): Remounting filesystem read-only [ 451.801650][T19985] EXT4-fs (loop6): 1 orphan inode deleted [ 451.807510][T19985] EXT4-fs (loop6): 1 truncate cleaned up [ 451.939462][T20004] loop6: detected capacity change from 0 to 512 [ 451.965571][T20004] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5680: Failed to acquire dquot type 1 [ 451.980888][T20004] EXT4-fs (loop6): 1 truncate cleaned up [ 451.988102][T20004] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.017027][T20010] hub 2-0:1.0: USB hub found [ 452.021766][T20010] hub 2-0:1.0: 8 ports detected [ 452.077051][T20015] hub 2-0:1.0: USB hub found [ 452.081835][T20015] hub 2-0:1.0: 8 ports detected [ 452.227654][T20023] loop6: detected capacity change from 0 to 512 [ 452.230936][T20025] bond1: entered promiscuous mode [ 452.236231][T20023] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 452.239131][T20025] bond1: entered allmulticast mode [ 452.244236][T20025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.251022][T20023] EXT4-fs (loop6): 1 truncate cleaned up [ 452.285074][T20030] loop8: detected capacity change from 0 to 164 [ 452.298988][T20025] bond1 (unregistering): Released all slaves [ 452.530244][T20047] loop8: detected capacity change from 0 to 1024 [ 452.537567][T20047] EXT4-fs: Ignoring removed orlov option [ 452.548015][T20047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 452.742801][T20067] loop5: detected capacity change from 0 to 4096 [ 452.751222][T20067] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 452.900377][T20080] loop6: detected capacity change from 0 to 512 [ 452.927346][T20080] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5706: Failed to acquire dquot type 1 [ 452.943403][T20080] EXT4-fs (loop6): 1 truncate cleaned up [ 452.953032][T20080] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.079944][T20097] loop6: detected capacity change from 0 to 512 [ 453.087111][T20097] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 453.109239][T20097] EXT4-fs (loop6): 1 truncate cleaned up [ 453.505325][T20127] loop8: detected capacity change from 0 to 512 [ 453.512468][T20127] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 453.527527][T20127] EXT4-fs (loop8): 1 truncate cleaned up [ 453.681534][T20141] loop5: detected capacity change from 0 to 512 [ 453.691602][T20143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20143 comm=syz.8.5732 [ 453.704362][T20143] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20143 comm=syz.8.5732 [ 453.725930][T20145] loop6: detected capacity change from 0 to 1024 [ 453.732637][T20145] EXT4-fs: Ignoring removed orlov option [ 453.738581][T20145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.742297][T20141] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5730: Failed to acquire dquot type 1 [ 453.758897][T20141] EXT4-fs (loop5): 1 truncate cleaned up [ 453.765142][T20141] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.796621][T20153] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 453.964380][ T29] kauditd_printk_skb: 1263 callbacks suppressed [ 453.964396][ T29] audit: type=1326 audit(1743893305.119:27583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.009543][T20163] loop7: detected capacity change from 0 to 4096 [ 454.028182][T20167] loop8: detected capacity change from 0 to 512 [ 454.031173][ T29] audit: type=1326 audit(1743893305.149:27584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.058657][ T29] audit: type=1326 audit(1743893305.149:27585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.065263][T20163] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 454.082486][ T29] audit: type=1326 audit(1743893305.149:27586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.114715][ T29] audit: type=1326 audit(1743893305.149:27587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.138679][ T29] audit: type=1326 audit(1743893305.149:27588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.138861][ T29] audit: type=1326 audit(1743893305.149:27589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.186381][ T29] audit: type=1326 audit(1743893305.149:27590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.186428][ T29] audit: type=1326 audit(1743893305.149:27591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.186469][ T29] audit: type=1326 audit(1743893305.149:27592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20164 comm="syz.8.5738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 454.194743][T20167] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 454.236079][T20171] loop5: detected capacity change from 0 to 512 [ 454.280222][T20171] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 454.297253][T20167] EXT4-fs (loop8): 1 truncate cleaned up [ 454.297550][T20171] EXT4-fs (loop5): 1 truncate cleaned up [ 454.411642][T20184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20184 comm=syz.5.5744 [ 454.416745][T20181] loop8: detected capacity change from 0 to 512 [ 454.424270][T20184] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20184 comm=syz.5.5744 [ 454.431548][T20181] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 454.454299][T20181] EXT4-fs (loop8): 1 truncate cleaned up [ 454.517133][T20190] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 454.637961][T20202] hub 2-0:1.0: USB hub found [ 454.642698][T20202] hub 2-0:1.0: 8 ports detected [ 454.644214][T20203] validate_nla: 6 callbacks suppressed [ 454.644233][T20203] netlink: 'syz.6.5747': attribute type 10 has an invalid length. [ 454.663078][T20203] netlink: 'syz.6.5747': attribute type 10 has an invalid length. [ 454.671089][T20203] __nla_validate_parse: 5 callbacks suppressed [ 454.671105][T20203] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5747'. [ 454.686670][T20202] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5750'. [ 454.728450][T20209] loop5: detected capacity change from 0 to 512 [ 454.745315][T20209] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.5752: Failed to acquire dquot type 1 [ 454.760892][T20209] EXT4-fs (loop5): 1 truncate cleaned up [ 454.767521][T20209] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.859051][T20216] loop8: detected capacity change from 0 to 4096 [ 454.867522][T20216] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 454.911623][T20220] loop5: detected capacity change from 0 to 512 [ 454.918975][T20220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 454.940404][T20220] EXT4-fs (loop5): 1 truncate cleaned up [ 454.977785][T20229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20229 comm=syz.5.5758 [ 454.990433][T20229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20229 comm=syz.5.5758 [ 455.041532][T20234] loop7: detected capacity change from 0 to 1024 [ 455.048220][T20234] EXT4-fs: Ignoring removed orlov option [ 455.054379][T20234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 455.084694][T20239] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 455.097733][T20235] loop8: detected capacity change from 0 to 128 [ 455.147929][T20241] hub 2-0:1.0: USB hub found [ 455.152739][T20241] hub 2-0:1.0: 8 ports detected [ 455.180381][T20241] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5761'. [ 455.336529][T20252] loop5: detected capacity change from 0 to 4096 [ 455.344276][T20252] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 455.491243][T20255] loop5: detected capacity change from 0 to 128 [ 455.822518][T20262] loop8: detected capacity change from 0 to 512 [ 455.829120][T20262] EXT4-fs: Ignoring removed oldalloc option [ 455.835508][T20262] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 455.860229][T20262] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.5767: invalid indirect mapped block 4294967295 (level 0) [ 455.878769][T20262] EXT4-fs (loop8): Remounting filesystem read-only [ 455.885688][T20262] EXT4-fs (loop8): 1 orphan inode deleted [ 455.891541][T20262] EXT4-fs (loop8): 1 truncate cleaned up [ 456.001393][T20278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20278 comm=syz.8.5771 [ 456.014190][T20278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20278 comm=syz.8.5771 [ 456.064232][T20282] bond2: entered promiscuous mode [ 456.069311][T20282] bond2: entered allmulticast mode [ 456.074781][T20282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.085304][T20282] bond2 (unregistering): Released all slaves [ 456.106666][T20286] netlink: 'syz.1.5773': attribute type 1 has an invalid length. [ 456.117181][T20286] loop1: detected capacity change from 0 to 164 [ 456.120723][T20287] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 456.195320][T20289] hub 2-0:1.0: USB hub found [ 456.205745][T20289] hub 2-0:1.0: 8 ports detected [ 456.230122][T20295] loop7: detected capacity change from 0 to 512 [ 456.263278][T20289] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5775'. [ 456.299561][T20295] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 456.322155][T20295] EXT4-fs (loop7): 1 truncate cleaned up [ 456.407909][T20308] loop7: detected capacity change from 0 to 512 [ 456.456234][T20310] netlink: 'syz.5.5784': attribute type 10 has an invalid length. [ 456.479144][T20308] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5783: Failed to acquire dquot type 1 [ 456.560313][T20314] loop5: detected capacity change from 0 to 512 [ 456.573471][T20308] EXT4-fs (loop7): 1 truncate cleaned up [ 456.577534][T20314] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 456.580046][T20308] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.607216][T20314] EXT4-fs (loop5): 1 truncate cleaned up [ 456.709895][T20320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20320 comm=syz.7.5786 [ 456.722738][T20320] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20320 comm=syz.7.5786 [ 456.836012][T20325] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 456.881108][T20324] loop5: detected capacity change from 0 to 4096 [ 456.896844][T20324] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 456.923494][T20329] hub 2-0:1.0: USB hub found [ 456.933640][T20329] hub 2-0:1.0: 8 ports detected [ 456.952554][T20329] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5790'. [ 457.051247][T20344] bond1: entered promiscuous mode [ 457.056416][T20344] bond1: entered allmulticast mode [ 457.061766][T20344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.075703][T20344] bond1 (unregistering): Released all slaves [ 457.097242][T20349] netlink: 'syz.8.5795': attribute type 1 has an invalid length. [ 457.107178][T20349] loop8: detected capacity change from 0 to 164 [ 457.129094][T20348] loop5: detected capacity change from 0 to 128 [ 457.158014][T20353] bond2: entered promiscuous mode [ 457.163171][T20353] bond2: entered allmulticast mode [ 457.168617][T20353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.195805][T20353] bond2 (unregistering): Released all slaves [ 457.206777][T20356] netlink: 'syz.1.5797': attribute type 1 has an invalid length. [ 457.222533][T20356] loop1: detected capacity change from 0 to 164 [ 457.356406][T20372] loop8: detected capacity change from 0 to 512 [ 457.446261][T20379] loop7: detected capacity change from 0 to 512 [ 457.457845][T20379] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 457.491555][T20372] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.5802: Failed to acquire dquot type 1 [ 457.499912][T20382] loop1: detected capacity change from 0 to 4096 [ 457.507040][T20372] EXT4-fs (loop8): 1 truncate cleaned up [ 457.513254][T20379] EXT4-fs (loop7): 1 truncate cleaned up [ 457.516741][T20372] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.537511][T20382] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 457.788829][T20398] loop1: detected capacity change from 0 to 128 [ 457.877392][T20403] hub 2-0:1.0: USB hub found [ 457.877678][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5808'. [ 457.882131][T20403] hub 2-0:1.0: 8 ports detected [ 457.939328][T20403] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5810'. [ 458.142533][T20418] loop5: detected capacity change from 0 to 4096 [ 458.150598][T20418] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 458.170272][T20420] hub 2-0:1.0: USB hub found [ 458.191586][T20420] hub 2-0:1.0: 8 ports detected [ 458.254637][T20420] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5815'. [ 458.339308][T20433] netlink: 'syz.6.5817': attribute type 10 has an invalid length. [ 458.377292][T20438] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5821'. [ 458.389417][T20433] netlink: 'syz.6.5817': attribute type 10 has an invalid length. [ 458.397432][T20433] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5817'. [ 458.419955][T20434] loop5: detected capacity change from 0 to 128 [ 458.429826][T20438] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.486677][T20438] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.545672][T20438] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.605715][T20438] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.607789][T20453] hub 2-0:1.0: USB hub found [ 458.620823][T20454] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 458.626620][T20453] hub 2-0:1.0: 8 ports detected [ 458.672024][T20438] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.685475][T20438] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.703108][T20438] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.720876][T20438] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.823267][T20466] netlink: 'syz.1.5827': attribute type 10 has an invalid length. [ 458.865252][T20470] loop8: detected capacity change from 0 to 8192 [ 459.081387][T20490] hub 2-0:1.0: USB hub found [ 459.087473][T20492] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.105502][T20490] hub 2-0:1.0: 8 ports detected [ 459.139382][T20492] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.192078][ T29] kauditd_printk_skb: 929 callbacks suppressed [ 459.192096][ T29] audit: type=1326 audit(1743893310.339:28516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 459.224031][T20492] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.238375][T20496] loop7: detected capacity change from 0 to 512 [ 459.238856][ T29] audit: type=1326 audit(1743893310.379:28517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 459.247826][T20496] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 459.268519][ T29] audit: type=1326 audit(1743893310.379:28518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 459.284281][T20496] EXT4-fs (loop7): 1 truncate cleaned up [ 459.301980][ T29] audit: type=1326 audit(1743893310.379:28519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f50aaded169 code=0x7ffc0000 [ 459.302022][ T29] audit: type=1326 audit(1743893310.379:28520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50aaded1a3 code=0x7ffc0000 [ 459.354871][ T29] audit: type=1326 audit(1743893310.379:28521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50aadebc1f code=0x7ffc0000 [ 459.378302][ T29] audit: type=1326 audit(1743893310.379:28522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f50aaded1f7 code=0x7ffc0000 [ 459.401914][ T29] audit: type=1326 audit(1743893310.389:28523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50aadebad0 code=0x7ffc0000 [ 459.425665][ T29] audit: type=1326 audit(1743893310.389:28524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50aadecd6b code=0x7ffc0000 [ 459.449946][ T29] audit: type=1326 audit(1743893310.399:28525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.7.5838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f50aadebdca code=0x7ffc0000 [ 459.523956][T20492] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.568881][T20492] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.594402][T20492] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.607088][T20492] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.622209][T20492] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.710014][T20504] loop5: detected capacity change from 0 to 4096 [ 459.717335][T20504] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 459.787024][T20509] netlink: 'syz.8.5841': attribute type 10 has an invalid length. [ 459.832789][T20502] __nla_validate_parse: 3 callbacks suppressed [ 459.832806][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5840'. [ 459.879124][T20502] loop7: detected capacity change from 0 to 512 [ 459.889709][T20502] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 459.903079][T20502] EXT4-fs (loop7): 1 truncate cleaned up [ 459.971189][T20516] loop5: detected capacity change from 0 to 128 [ 460.068812][T20526] bond1: entered promiscuous mode [ 460.073946][T20526] bond1: entered allmulticast mode [ 460.082311][T20526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.104073][T20526] bond1 (unregistering): Released all slaves [ 460.113927][T20529] netlink: 'syz.7.5849': attribute type 1 has an invalid length. [ 460.174421][T20529] loop7: detected capacity change from 0 to 164 [ 460.293171][T20544] netlink: 'syz.1.5855': attribute type 10 has an invalid length. [ 460.299814][T20546] selinux_netlink_send: 4 callbacks suppressed [ 460.299834][T20546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20546 comm=syz.8.5856 [ 460.319988][T20546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20546 comm=syz.8.5856 [ 460.339748][T20541] loop7: detected capacity change from 0 to 8192 [ 460.414948][T20547] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 460.690378][T20561] bond1: entered promiscuous mode [ 460.695532][T20561] bond1: entered allmulticast mode [ 460.704542][T20561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.722463][T20564] sd 0:0:1:0: device reset [ 460.729337][T20561] bond1 (unregistering): Released all slaves [ 460.735866][T20565] netlink: 'syz.5.5862': attribute type 1 has an invalid length. [ 460.745533][T20565] loop5: detected capacity change from 0 to 164 [ 461.218628][T20577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20577 comm=syz.5.5867 [ 461.231318][T20577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20577 comm=syz.5.5867 [ 461.293614][T20583] loop7: detected capacity change from 0 to 4096 [ 461.300804][T20583] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 461.317021][T20585] loop6: detected capacity change from 0 to 1024 [ 461.323897][T20585] EXT4-fs: Ignoring removed orlov option [ 461.329862][T20586] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 461.329923][T20585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.412095][T20597] random: crng reseeded on system resumption [ 461.463014][T20600] loop7: detected capacity change from 0 to 128 [ 461.871810][T20617] loop6: detected capacity change from 0 to 256 [ 461.878609][T20617] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.886639][T20621] netlink: 'syz.5.5881': attribute type 10 has an invalid length. [ 461.898727][T20617] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 461.902384][T20621] netlink: 'syz.5.5881': attribute type 10 has an invalid length. [ 461.917374][T20621] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5881'. [ 462.210178][T20625] netlink: 'syz.7.5883': attribute type 10 has an invalid length. [ 462.726653][T20633] random: crng reseeded on system resumption [ 462.856097][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5887'. [ 462.869084][T20636] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.915160][T20636] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.965192][T20636] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.025364][T20636] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.081269][T20636] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.093119][T20636] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.105867][T20636] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.118427][T20636] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.285209][T20648] loop6: detected capacity change from 0 to 1024 [ 463.291952][T20648] EXT4-fs: Ignoring removed orlov option [ 463.300818][T20648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.421860][T20661] loop6: detected capacity change from 0 to 512 [ 463.437555][T20661] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5897: Failed to acquire dquot type 1 [ 463.449605][T20661] EXT4-fs (loop6): 1 truncate cleaned up [ 463.459271][T20661] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.519941][T20665] bond1: entered promiscuous mode [ 463.525254][T20665] bond1: entered allmulticast mode [ 463.530812][T20665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.544314][T20665] bond1 (unregistering): Released all slaves [ 463.554727][T20668] netlink: 'syz.6.5898': attribute type 1 has an invalid length. [ 463.562683][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5894'. [ 463.573640][T20668] loop6: detected capacity change from 0 to 164 [ 463.602174][T20655] loop1: detected capacity change from 0 to 512 [ 463.609327][T20655] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 463.620956][T20655] EXT4-fs (loop1): 1 truncate cleaned up [ 463.750160][T20680] netlink: 'syz.1.5903': attribute type 10 has an invalid length. [ 463.817471][T20686] hub 2-0:1.0: USB hub found [ 463.822406][T20686] hub 2-0:1.0: 8 ports detected [ 463.881556][T20686] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5906'. [ 463.926671][T20695] loop6: detected capacity change from 0 to 512 [ 463.934450][T20695] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 463.960888][T20695] EXT4-fs (loop6): 1 truncate cleaned up [ 464.120681][T20703] sd 0:0:1:0: device reset [ 464.205296][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 464.205314][ T29] audit: type=1326 audit(1743893315.359:29064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.262159][ T29] audit: type=1326 audit(1743893315.389:29065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.285903][ T29] audit: type=1326 audit(1743893315.389:29066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.309583][ T29] audit: type=1326 audit(1743893315.389:29067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.333262][ T29] audit: type=1326 audit(1743893315.389:29068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.337173][T20720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5913'. [ 464.357048][ T29] audit: type=1326 audit(1743893315.389:29069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.357093][ T29] audit: type=1326 audit(1743893315.389:29070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.376998][T20720] loop1: detected capacity change from 0 to 512 [ 464.389839][ T29] audit: type=1326 audit(1743893315.389:29071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.389880][ T29] audit: type=1326 audit(1743893315.389:29072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.389957][ T29] audit: type=1326 audit(1743893315.389:29073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.8.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f48617dd169 code=0x7ffc0000 [ 464.430238][T20720] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 464.502411][T20720] EXT4-fs (loop1): 1 truncate cleaned up [ 464.509098][T20719] netlink: 'syz.8.5916': attribute type 10 has an invalid length. [ 464.629410][T20727] hub 2-0:1.0: USB hub found [ 464.635259][T20727] hub 2-0:1.0: 8 ports detected [ 464.663244][T20732] loop1: detected capacity change from 0 to 512 [ 464.670183][T20727] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5919'. [ 464.670770][T20732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 464.690831][T20732] EXT4-fs (loop1): 1 truncate cleaned up [ 464.915428][T20747] netlink: 'syz.1.5934': attribute type 10 has an invalid length. [ 464.938015][T20747] netlink: 'syz.1.5934': attribute type 10 has an invalid length. [ 464.945965][T20747] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5934'. [ 465.219826][T20767] hub 2-0:1.0: USB hub found [ 465.236916][T20767] hub 2-0:1.0: 8 ports detected [ 465.270679][T20767] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5933'. [ 465.374426][T20776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20776 comm=syz.8.5937 [ 465.387122][T20776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20776 comm=syz.8.5937 [ 465.518672][T20779] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 465.607225][T20783] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5949'. [ 465.654828][T20783] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.726192][T20783] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.758349][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5939'. [ 465.788538][T20783] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.835792][T20783] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.841057][T20786] loop8: detected capacity change from 0 to 1024 [ 465.853797][T20786] EXT4-fs: Ignoring removed orlov option [ 465.859670][T20786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 465.906252][T20783] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.921303][T20783] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.962306][T20783] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.978971][T20783] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.025739][T20798] loop7: detected capacity change from 0 to 512 [ 466.034642][T20799] netlink: 'syz.5.5945': attribute type 10 has an invalid length. [ 466.038507][T20798] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.5944: Failed to acquire dquot type 1 [ 466.057216][T20798] EXT4-fs (loop7): 1 truncate cleaned up [ 466.063254][T20798] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.234686][T20811] loop7: detected capacity change from 0 to 512 [ 466.241792][T20811] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 466.253971][T20811] EXT4-fs (loop7): 1 truncate cleaned up [ 466.321813][T20816] loop8: detected capacity change from 0 to 4096 [ 466.329919][T20816] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 466.489207][T20819] loop8: detected capacity change from 0 to 128 [ 467.099003][T20824] sd 0:0:1:0: device reset [ 467.208566][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5952'. [ 467.252260][T20828] loop8: detected capacity change from 0 to 1024 [ 467.259585][T20828] EXT4-fs: Ignoring removed orlov option [ 467.266619][T20828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.297830][T20828] EXT4-fs mount: 85 callbacks suppressed [ 467.297848][T20828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.338637][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.440893][T20852] loop6: detected capacity change from 0 to 512 [ 467.473528][T20852] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.5964: Failed to acquire dquot type 1 [ 467.485591][T20852] EXT4-fs (loop6): 1 truncate cleaned up [ 467.491848][T20852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.510264][T20852] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.540838][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.592034][T20870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20870 comm=syz.8.5972 [ 467.594407][T20869] loop6: detected capacity change from 0 to 1024 [ 467.604742][T20870] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20870 comm=syz.8.5972 [ 467.611802][T20869] EXT4-fs: Ignoring removed orlov option [ 467.630238][T20869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.655607][T20869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.681818][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.702689][T20874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20874 comm=syz.6.5973 [ 467.706969][T20875] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 467.715292][T20874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20874 comm=syz.6.5973 [ 467.817673][T20884] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 467.904480][T20894] loop1: detected capacity change from 0 to 512 [ 467.927275][T20898] loop6: detected capacity change from 0 to 4096 [ 467.936404][T20894] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.5982: Failed to acquire dquot type 1 [ 467.948114][T20898] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 467.957493][T20894] EXT4-fs (loop1): 1 truncate cleaned up [ 467.965329][T20894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.980987][T20894] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.012093][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.045324][T20910] loop8: detected capacity change from 0 to 512 [ 468.054184][T20910] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 468.068691][T20910] EXT4-fs (loop8): 1 truncate cleaned up [ 468.078138][T20910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.107071][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.152779][T20918] loop6: detected capacity change from 0 to 128 [ 468.178907][T20922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20922 comm=syz.1.5992 [ 468.191598][T20922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20922 comm=syz.1.5992 [ 468.284617][T20929] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 468.347715][T20932] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5996'. [ 468.367149][T20928] loop8: detected capacity change from 0 to 512 [ 468.374324][T20928] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 468.396095][T20928] EXT4-fs (loop8): 1 truncate cleaned up [ 468.402411][T20928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.445108][T20941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6001'. [ 468.461165][T20941] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.473939][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.509874][T20943] bond1: entered promiscuous mode [ 468.515024][T20943] bond1: entered allmulticast mode [ 468.520398][T20943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.530850][T20943] bond1 (unregistering): Released all slaves [ 468.543469][T20941] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.554437][T20946] netlink: 'syz.8.6002': attribute type 1 has an invalid length. [ 468.564031][T20946] loop8: detected capacity change from 0 to 164 [ 468.611502][T20948] bond1: entered promiscuous mode [ 468.616691][T20948] bond1: entered allmulticast mode [ 468.622016][T20948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.633147][T20948] bond1 (unregistering): Released all slaves [ 468.643911][T20941] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.655745][T20950] netlink: 'syz.8.6003': attribute type 1 has an invalid length. [ 468.665778][T20950] loop8: detected capacity change from 0 to 164 [ 468.705353][T20941] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.727683][T20952] bond1: entered promiscuous mode [ 468.733005][T20952] bond1: entered allmulticast mode [ 468.738884][T20952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.755770][T20952] bond1 (unregistering): Released all slaves [ 468.776194][T20941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.777161][T20954] netlink: 'syz.8.6004': attribute type 1 has an invalid length. [ 468.789275][T20941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.805268][T20941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.818491][T20941] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.828134][T20954] loop8: detected capacity change from 0 to 164 [ 468.940100][T20960] bond1: entered promiscuous mode [ 468.945849][T20960] bond1: entered allmulticast mode [ 468.951261][T20968] loop1: detected capacity change from 0 to 1024 [ 468.951399][T20960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.961596][T20968] EXT4-fs: Ignoring removed orlov option [ 468.976504][T20969] netlink: 'syz.8.6007': attribute type 1 has an invalid length. [ 468.986193][T20968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.994669][T20960] bond1 (unregistering): Released all slaves [ 469.006393][T20969] loop8: detected capacity change from 0 to 164 [ 469.029498][T20968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.093694][T20977] bond1: entered promiscuous mode [ 469.098939][T20977] bond1: entered allmulticast mode [ 469.105262][T20977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.121925][T20983] netlink: 'syz.5.6012': attribute type 1 has an invalid length. [ 469.127732][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.139194][T20983] loop5: detected capacity change from 0 to 164 [ 469.142706][T20977] bond1 (unregistering): Released all slaves [ 469.165369][T20985] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.243934][T20985] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.299504][T20989] bond1: entered promiscuous mode [ 469.304778][T20989] bond1: entered allmulticast mode [ 469.311988][T20989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.329584][T20989] bond1 (unregistering): Released all slaves [ 469.345150][T20995] netlink: 'syz.5.6027': attribute type 1 has an invalid length. [ 469.345207][T20985] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.363633][T20995] loop5: detected capacity change from 0 to 164 [ 469.401923][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 469.401943][ T29] audit: type=1326 audit(1743893320.549:29717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.432029][ T29] audit: type=1326 audit(1743893320.549:29718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.456270][ T29] audit: type=1326 audit(1743893320.549:29719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.479970][ T29] audit: type=1326 audit(1743893320.549:29720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20996 comm="syz.1.6030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.514239][ T29] audit: type=1326 audit(1743893320.669:29721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.515219][T20985] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.538013][ T29] audit: type=1326 audit(1743893320.669:29722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.590261][ T29] audit: type=1326 audit(1743893320.739:29723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.614074][ T29] audit: type=1326 audit(1743893320.739:29724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.637819][ T29] audit: type=1326 audit(1743893320.739:29725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.665639][T21006] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6021'. [ 469.674811][ T29] audit: type=1326 audit(1743893320.749:29726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21003 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f76e207d169 code=0x7ffc0000 [ 469.681405][T21004] netlink: 'syz.1.6022': attribute type 10 has an invalid length. [ 469.722945][T20985] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.739293][T21010] bond1: entered promiscuous mode [ 469.744430][T21010] bond1: entered allmulticast mode [ 469.749919][T21010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.760740][T21010] bond1 (unregistering): Released all slaves [ 469.773830][T20985] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.786280][T20985] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.795130][T21013] loop5: detected capacity change from 0 to 164 [ 469.799356][T20985] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.868787][T21019] loop5: detected capacity change from 0 to 1024 [ 469.876412][T21019] EXT4-fs: Ignoring removed orlov option [ 469.882153][T21019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.898846][T21019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.911206][T21021] loop8: detected capacity change from 0 to 4096 [ 469.918380][T21021] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 469.938206][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.970034][T21026] bond1: entered promiscuous mode [ 469.975265][T21026] bond1: entered allmulticast mode [ 469.980741][T21026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.000829][T21026] bond1 (unregistering): Released all slaves [ 470.010900][T21031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6032'. [ 470.021509][T21034] validate_nla: 1 callbacks suppressed [ 470.021527][T21034] netlink: 'syz.6.6031': attribute type 1 has an invalid length. [ 470.036510][T21031] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.050101][T21034] loop6: detected capacity change from 0 to 164 [ 470.072506][T21036] loop7: detected capacity change from 0 to 512 [ 470.111188][T21031] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.128873][T21037] loop8: detected capacity change from 0 to 128 [ 470.159150][T21031] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.170937][T21036] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.6033: Failed to acquire dquot type 1 [ 470.186471][T21036] EXT4-fs (loop7): 1 truncate cleaned up [ 470.192712][T21036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.204880][T21047] bond1: entered promiscuous mode [ 470.210237][T21047] bond1: entered allmulticast mode [ 470.218679][T21036] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.218693][T21047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.242225][T15777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.252945][T21050] netlink: 'syz.6.6037': attribute type 1 has an invalid length. [ 470.264159][T21047] bond1 (unregistering): Released all slaves [ 470.270493][T21050] loop6: detected capacity change from 0 to 164 [ 470.283297][T21031] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.295741][T21052] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.365991][T21052] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.388690][T21031] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.402134][T21031] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.417104][T21052] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.433508][T21031] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.447087][T21031] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.454692][T21062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21062 comm=syz.6.6043 [ 470.468014][T21062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21062 comm=syz.6.6043 [ 470.482466][T21052] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.551358][T21052] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.560637][T21065] sd 0:0:1:0: device reset [ 470.568041][T21052] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.580596][T21052] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.589566][T21066] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 470.594618][T21052] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.687209][T21076] loop6: detected capacity change from 0 to 512 [ 470.695483][T21076] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 470.709322][T21076] EXT4-fs (loop6): 1 truncate cleaned up [ 470.715608][T21076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.744353][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.778858][T21084] loop8: detected capacity change from 0 to 764 [ 470.811344][T21086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21086 comm=syz.7.6053 [ 470.824049][T21086] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21086 comm=syz.7.6053 [ 470.867391][T21092] loop6: detected capacity change from 0 to 1024 [ 470.874425][T21092] EXT4-fs: Ignoring removed orlov option [ 470.877358][T21094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21094 comm=syz.8.6056 [ 470.880168][T21092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 470.892681][T21094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21094 comm=syz.8.6056 [ 470.915917][T21092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.917730][T21097] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 470.944797][T21098] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 470.959576][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.042681][T21112] loop6: detected capacity change from 0 to 512 [ 471.050198][T21112] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 471.064417][T21108] loop7: detected capacity change from 0 to 4096 [ 471.071958][T21108] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 471.081815][T21112] EXT4-fs (loop6): 1 truncate cleaned up [ 471.091089][T21112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.130106][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.286113][T21123] loop7: detected capacity change from 0 to 128 [ 471.321742][T21124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6075'. [ 471.330819][T21125] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6065'. [ 471.360242][T21120] loop6: detected capacity change from 0 to 512 [ 471.370700][T21120] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 471.375848][T21118] loop8: detected capacity change from 0 to 512 [ 471.382792][T21120] EXT4-fs (loop6): 1 truncate cleaned up [ 471.391651][T21118] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 471.393734][T21120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.414442][T21118] EXT4-fs (loop8): 1 truncate cleaned up [ 471.414917][T21118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.479058][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.491232][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.539427][T21134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21134 comm=syz.8.6068 [ 471.552139][T21134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21134 comm=syz.8.6068 [ 471.600380][T21136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21136 comm=syz.6.6069 [ 471.613113][T21136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21136 comm=syz.6.6069 [ 471.644622][T21137] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 471.674444][T21139] loop8: detected capacity change from 0 to 1024 [ 471.677761][T21140] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 471.681157][T21139] EXT4-fs: Ignoring removed orlov option [ 471.694212][T21139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 471.709345][T21139] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.741827][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.796473][T21153] loop6: detected capacity change from 0 to 512 [ 471.804008][T21154] loop8: detected capacity change from 0 to 512 [ 471.810856][T21154] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 471.832670][T21154] EXT4-fs (loop8): 1 truncate cleaned up [ 471.839072][T21154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.843001][T21153] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6077: Failed to acquire dquot type 1 [ 471.866618][T21153] EXT4-fs (loop6): 1 truncate cleaned up [ 471.872864][T21153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.885962][T21153] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.889954][T15940] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.919616][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.959167][T21161] hub 2-0:1.0: USB hub found [ 471.964084][T21161] hub 2-0:1.0: 8 ports detected [ 471.977237][T21159] hub 2-0:1.0: USB hub found [ 471.986719][T21159] hub 2-0:1.0: 8 ports detected [ 472.011738][T21161] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6079'. [ 472.055006][T21169] random: crng reseeded on system resumption [ 472.092560][T21176] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6078'. [ 472.219743][T21191] loop6: detected capacity change from 0 to 512 [ 472.229193][T21193] loop8: detected capacity change from 0 to 4096 [ 472.238997][T21191] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 472.249782][T21193] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 472.271040][T21191] EXT4-fs (loop6): 1 truncate cleaned up [ 472.277386][T21191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.319409][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.470761][T21212] loop8: detected capacity change from 0 to 128 [ 472.478667][T21211] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6098'. [ 472.599181][T21223] random: crng reseeded on system resumption [ 472.730778][T21233] loop1: detected capacity change from 0 to 512 [ 472.749670][T21233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 472.782184][T21233] EXT4-fs (loop1): 1 truncate cleaned up [ 472.791840][T21233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.856396][T11645] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.883078][T21240] bond1: entered promiscuous mode [ 472.888355][T21240] bond1: entered allmulticast mode [ 472.894160][T21240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.910602][T21245] netlink: 'syz.1.6109': attribute type 10 has an invalid length. [ 472.920764][T21240] bond1 (unregistering): Released all slaves [ 472.928950][T21248] netlink: 'syz.6.6108': attribute type 1 has an invalid length. [ 472.939562][T21248] loop6: detected capacity change from 0 to 164 [ 472.946351][T21243] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6110'. [ 473.103865][T21265] random: crng reseeded on system resumption [ 473.111576][T21266] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 473.209055][T21277] bond1: entered promiscuous mode [ 473.214203][T21277] bond1: entered allmulticast mode [ 473.219673][T21277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.219711][T21275] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6122'. [ 473.249934][T21281] netlink: 'syz.6.6123': attribute type 1 has an invalid length. [ 473.251277][T21277] bond1 (unregistering): Released all slaves [ 473.273805][T21281] loop6: detected capacity change from 0 to 164 [ 473.338077][T21292] loop6: detected capacity change from 0 to 512 [ 473.365935][T21292] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6129: Failed to acquire dquot type 1 [ 473.377970][T21292] EXT4-fs (loop6): 1 truncate cleaned up [ 473.384845][T21292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.401335][T21292] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.405662][T21298] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 473.429066][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.456199][T21303] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 473.498144][T21309] random: crng reseeded on system resumption [ 473.566395][T21313] hub 2-0:1.0: USB hub found [ 473.571150][T21313] hub 2-0:1.0: 8 ports detected [ 473.626760][T21313] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6137'. [ 473.660747][T21328] loop6: detected capacity change from 0 to 512 [ 473.681844][T21328] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.6143: Failed to acquire dquot type 1 [ 473.713276][T21328] EXT4-fs (loop6): 1 truncate cleaned up [ 473.718671][T21335] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 473.719566][T21328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.740417][T21328] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.797510][T16323] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.827248][T21346] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 473.836345][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6151'. [ 473.870045][T21342] loop5: detected capacity change from 0 to 512 [ 473.877752][T21342] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 473.881447][T21355] random: crng reseeded on system resumption [ 473.913733][T21342] EXT4-fs (loop5): 1 truncate cleaned up [ 473.919864][T21342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.938522][T21359] sd 0:0:1:0: device reset [ 473.982690][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.095649][T21372] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 474.120108][T21374] loop5: detected capacity change from 0 to 512 [ 474.136801][T21374] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6160: Failed to acquire dquot type 1 [ 474.148825][T21374] EXT4-fs (loop5): 1 truncate cleaned up [ 474.155871][T21374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.168600][T21374] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.189990][T16151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.234708][T21385] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 474.430753][T21390] loop5: detected capacity change from 0 to 8192 [ 474.658438][T21387] ================================================================== [ 474.666575][T21387] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 474.674568][T21387] [ 474.676901][T21387] write to 0xffffea0004824728 of 8 bytes by task 37 on cpu 1: [ 474.684364][T21387] __delete_from_swap_cache+0x200/0x2a0 [ 474.689914][T21387] delete_from_swap_cache+0x75/0xe0 [ 474.695117][T21387] shmem_swapin_folio+0xdfa/0xef0 [ 474.700169][T21387] shmem_get_folio_gfp+0x265/0xd30 [ 474.705307][T21387] shmem_write_begin+0xa7/0x190 [ 474.710194][T21387] generic_perform_write+0x189/0x4b0 [ 474.715479][T21387] shmem_file_write_iter+0xc2/0xe0 [ 474.720591][T21387] do_iter_readv_writev+0x40d/0x4b0 [ 474.725889][T21387] vfs_iter_write+0x265/0x5c0 [ 474.730572][T21387] loop_process_work+0xaf8/0x1240 [ 474.735601][T21387] loop_workfn+0x31/0x40 [ 474.739844][T21387] process_scheduled_works+0x4de/0xa20 [ 474.745337][T21387] worker_thread+0x52c/0x710 [ 474.749926][T21387] kthread+0x4b7/0x540 [ 474.754025][T21387] ret_from_fork+0x4b/0x60 [ 474.758482][T21387] ret_from_fork_asm+0x1a/0x30 [ 474.763258][T21387] [ 474.765580][T21387] read to 0xffffea0004824728 of 8 bytes by task 21387 on cpu 0: [ 474.773227][T21387] folio_mapping+0xdb/0x120 [ 474.777734][T21387] evict_folios+0xd4e/0x2fb0 [ 474.782324][T21387] try_to_shrink_lruvec+0x405/0x590 [ 474.787546][T21387] shrink_lruvec+0x220/0x1970 [ 474.792237][T21387] shrink_node+0x60b/0x1da0 [ 474.796741][T21387] do_try_to_free_pages+0x3c6/0xc10 [ 474.801934][T21387] try_to_free_mem_cgroup_pages+0x1e6/0x4a0 [ 474.807852][T21387] try_charge_memcg+0x364/0x820 [ 474.812728][T21387] obj_cgroup_charge_pages+0xc0/0x1a0 [ 474.818109][T21387] __memcg_kmem_charge_page+0x9d/0x170 [ 474.823583][T21387] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 474.829399][T21387] alloc_pages_mpol+0xb6/0x260 [ 474.834187][T21387] alloc_pages_noprof+0xe8/0x130 [ 474.839132][T21387] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 474.844942][T21387] __kvmalloc_node_noprof+0x311/0x520 [ 474.850314][T21387] ip_set_alloc+0x1f/0x30 [ 474.854644][T21387] hash_netiface_create+0x273/0x730 [ 474.859854][T21387] ip_set_create+0x3b6/0x970 [ 474.864440][T21387] nfnetlink_rcv_msg+0x4ba/0x580 [ 474.869383][T21387] netlink_rcv_skb+0x12f/0x230 [ 474.874145][T21387] nfnetlink_rcv+0x187/0x1610 [ 474.878828][T21387] netlink_unicast+0x605/0x6c0 [ 474.883591][T21387] netlink_sendmsg+0x609/0x720 [ 474.888373][T21387] __sock_sendmsg+0x140/0x180 [ 474.893080][T21387] ____sys_sendmsg+0x350/0x4e0 [ 474.897853][T21387] __sys_sendmsg+0x1a0/0x240 [ 474.902466][T21387] __x64_sys_sendmsg+0x46/0x50 [ 474.907252][T21387] x64_sys_call+0x26f3/0x2e10 [ 474.912036][T21387] do_syscall_64+0xc9/0x1c0 [ 474.916566][T21387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.922457][T21387] [ 474.924772][T21387] value changed: 0x0000000000002d70 -> 0x0000000000000000 [ 474.931868][T21387] [ 474.934187][T21387] Reported by Kernel Concurrency Sanitizer on: [ 474.940356][T21387] CPU: 0 UID: 0 PID: 21387 Comm: syz.5.6165 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(voluntary) [ 474.952515][T21387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.962662][T21387] ==================================================================