last executing test programs: 20.923714156s ago: executing program 2 (id=709): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2000001, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640), 0xb4, 0x34000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000100000007000000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0x1, @local, 0x7}]}, &(0x7f0000000480)=0x10) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r12, 0x2284, &(0x7f0000000080)) syz_io_uring_setup(0x6990, &(0x7f0000000280)={0x0, 0xafe9, 0x4000, 0x4, 0xc0}, &(0x7f0000000240), &(0x7f0000000140)) socket$qrtr(0x2a, 0x2, 0x0) 20.095885662s ago: executing program 2 (id=718): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x8000, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x70a}, {0x6, 0x10, 0x1, 0x1, 0x3, 0x2}}}]}]}]}}]}, 0x5c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) (async) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) mq_unlink(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0xfffffef9, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfead, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x4040004) 19.864258402s ago: executing program 2 (id=720): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r6}, 0x10) exit(0x7000000000000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) rt_sigpending(0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r8, r8, 0x0, 0x7a680000) r9 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000003c0)) mount_setattr(r8, &(0x7f0000000380)='./file0\x00', 0x1000, &(0x7f0000000400)={0x100000, 0x82, 0xa0000, {r9}}, 0x20) 19.010308169s ago: executing program 2 (id=733): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b1, &(0x7f0000000280)="$eJzs3T9rLFUUAPAzyf5Ti93CSgQHtLB6vrzWZoPkQXArZQu10IdJQLKLkEDAP7imsrWx9BMIgp1fwsbCXrAV7EwRGJmdmewmzm6ywU3U9/s1ublzzr1nbiYJW+zZD14cH+6lcXD6+a/R6SSx0Y9+nCXRi42ofBmX9L8OAOC/7CzL4o+ssEpeEhGd9ZUFAKzRyv//f1h7SQDAmr39zrtvbg8GO2+laScej786Geav7POvxfXtg/goRrEfD6Mb5xHZhWL8OMuySSPN9eKV8eRkmGeO3/+pXH/794hp/lZ0ozedupy/O9jZSgtz+ZO8jmfL/ft5/qPoxvM1++8Odh7V5MewFa++PFf/g+jGzx/GxzGKvWkRs/wvttL0jeybPz97Ly8vz08mJ8P2NG4m27zjHw0AAAAAAAAAAAAAAAAAAAAAAP9jD8reOe2Y9u/Jp8r+O5vn+TfNSCu9y/15ivykWuhKf6BJFt9W/XUepmmalYGz/Ea80IjG/dw1AAAAAAAAAAAAAAAAAAAA/Lscf/Lp4ZPRaP/oHxlU3QCqt/Xfdp3+3MxLURPTi4uZ9mzLjXLbJSvHZhWTRCwtI19xpeKb1+++YPDMoqzvvl/16DrXxzRvUeFNB1f6ORw+SerPsB3VTKd6SH6cj2nFDTdtLbqUrfT4tWovdVc+hNZz08FkSUwkywp7/bfi5MqZ5OpdtKanWpveLAfF70Lds7HS8/z3vxWJbh0AAAAAAAAAAAAAAAAAALBWszf91lw8XZD0y27xIf/RW3N1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3Zp//Xz947agmZlImL8yaDVpxdHzPtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBT4K8AAAD//0F5XcM=") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x10d143, 0xdf) pwrite64(r1, 0x0, 0x0, 0x7ff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x200c17a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @multicast1, r5}, 0xc) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) 18.024171192s ago: executing program 2 (id=744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0xa, 0x4}}], 0x38) read$snapshot(r3, 0x0, 0xffffffbf) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) syslog(0x4, &(0x7f0000000000)=""/123, 0x7b) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r3, 0x10e, 0x6, &(0x7f0000000780)=""/103, &(0x7f0000000800)=0x67) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r10) r12 = socket$caif_stream(0x25, 0x1, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r13}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r14}, 0x18) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r15, 0x0, 0xfffffeea) sendmsg(r12, &(0x7f00000005c0)={&(0x7f00000004c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="900c4161526cc9d82ef952f90bfc06c97a4d1ac83e76773fe588d2d7c98e07a5f770cb00", 0x24}], 0x1}, 0x40080) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f80)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r11, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 17.098325201s ago: executing program 2 (id=749): keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/37, 0x25) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) r5 = memfd_secret(0x80000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xbb}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='syzkaller\x00', 0x76a0, 0x4c, &(0x7f00000002c0)=""/76, 0x41000, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r4, r5, 0x1, r6, r7], &(0x7f0000000600)=[{0x1, 0x3, 0x1, 0x4}, {0x5, 0x2, 0x4, 0x7}, {0x1, 0x1, 0x7, 0xc}, {0x2, 0x3, 0x6, 0xa}, {0x0, 0x5, 0x7, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20) r10 = dup2(r8, r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={r5, 0x20, &(0x7f0000001b40)={&(0x7f00000019c0)=""/126, 0x7e, 0x0, &(0x7f0000001a40)=""/233, 0xe9}}, 0x10) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x15e, 0x0, r6, 0x6b8568bb, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1c, 0x1e, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x25b4b3d7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x99a, 0x1000, &(0x7f0000000940)=""/4096, 0x40f00, 0xa, '\x00', r2, @fallback=0x11, r10, 0x8, &(0x7f0000001940)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0xd, 0x8000, 0x7}, 0x10, r11, r3, 0x2, &(0x7f0000001c40)=[r4, r4, r0, r6, r3, 0xffffffffffffffff, r12], &(0x7f0000001c80)=[{0x4, 0x4, 0x2, 0x6}, {0x1, 0x3, 0x6, 0x1}], 0x10, 0x8}, 0x94) r13 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) write$selinux_validatetrans(r13, &(0x7f0000001dc0)={'system_u:object_r:ipmi_device_t:s0', 0x20, 'system_u:object_r:dri_device_t:s0', 0x20, 0x1f3, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x78) r14 = socket$kcm(0x29, 0x5, 0x0) flistxattr(r6, &(0x7f0000001e40)=""/4, 0x4) sendfile(r1, r10, &(0x7f0000001e80)=0x941b, 0x5) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), r5) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000002200)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000021c0)={&(0x7f0000001f40)={0x24c, r15, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x318}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x4000884) recvfrom(r3, &(0x7f0000002240)=""/209, 0xd1, 0x0, &(0x7f0000002340)=@isdn={0x22, 0x8, 0x4, 0x4, 0x7}, 0x80) openat$cgroup_int(r10, &(0x7f00000023c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x184000, 0x40) setsockopt$MRT6_ADD_MIF(r16, 0x29, 0xca, &(0x7f0000002440)={0xffffffffffffffff, 0x1, 0x8a, r2, 0x4c}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f00000024c0)={'sit0\x00', &(0x7f0000002480)={@private0, @multicast2, 0x19, 0x18}}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000002500)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, r2}, 0xc) getsockopt$sock_timeval(r14, 0x1, 0x42, &(0x7f0000002540), &(0x7f0000002580)=0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 17.047810904s ago: executing program 32 (id=749): keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/37, 0x25) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) r5 = memfd_secret(0x80000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xbb}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='syzkaller\x00', 0x76a0, 0x4c, &(0x7f00000002c0)=""/76, 0x41000, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r4, r5, 0x1, r6, r7], &(0x7f0000000600)=[{0x1, 0x3, 0x1, 0x4}, {0x5, 0x2, 0x4, 0x7}, {0x1, 0x1, 0x7, 0xc}, {0x2, 0x3, 0x6, 0xa}, {0x0, 0x5, 0x7, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r5}, 0x20) r10 = dup2(r8, r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b80)={r5, 0x20, &(0x7f0000001b40)={&(0x7f00000019c0)=""/126, 0x7e, 0x0, &(0x7f0000001a40)=""/233, 0xe9}}, 0x10) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x15e, 0x0, r6, 0x6b8568bb, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1c, 0x1e, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x25b4b3d7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x99a, 0x1000, &(0x7f0000000940)=""/4096, 0x40f00, 0xa, '\x00', r2, @fallback=0x11, r10, 0x8, &(0x7f0000001940)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0xd, 0x8000, 0x7}, 0x10, r11, r3, 0x2, &(0x7f0000001c40)=[r4, r4, r0, r6, r3, 0xffffffffffffffff, r12], &(0x7f0000001c80)=[{0x4, 0x4, 0x2, 0x6}, {0x1, 0x3, 0x6, 0x1}], 0x10, 0x8}, 0x94) r13 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) write$selinux_validatetrans(r13, &(0x7f0000001dc0)={'system_u:object_r:ipmi_device_t:s0', 0x20, 'system_u:object_r:dri_device_t:s0', 0x20, 0x1f3, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x78) r14 = socket$kcm(0x29, 0x5, 0x0) flistxattr(r6, &(0x7f0000001e40)=""/4, 0x4) sendfile(r1, r10, &(0x7f0000001e80)=0x941b, 0x5) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f00), r5) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000002200)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000021c0)={&(0x7f0000001f40)={0x24c, r15, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x318}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae9f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x20000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x4000884) recvfrom(r3, &(0x7f0000002240)=""/209, 0xd1, 0x0, &(0x7f0000002340)=@isdn={0x22, 0x8, 0x4, 0x4, 0x7}, 0x80) openat$cgroup_int(r10, &(0x7f00000023c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x184000, 0x40) setsockopt$MRT6_ADD_MIF(r16, 0x29, 0xca, &(0x7f0000002440)={0xffffffffffffffff, 0x1, 0x8a, r2, 0x4c}, 0xc) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f00000024c0)={'sit0\x00', &(0x7f0000002480)={@private0, @multicast2, 0x19, 0x18}}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000002500)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, r2}, 0xc) getsockopt$sock_timeval(r14, 0x1, 0x42, &(0x7f0000002540), &(0x7f0000002580)=0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612) 8.092304031s ago: executing program 0 (id=883): r0 = memfd_secret(0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xc5, 0x3, 0x5}, {0x100, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x8, 0x2}]}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x0, 0x2, 0x1000, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x9}, 0x50) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x189) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4000}, {r0, 0x901c}, {0xffffffffffffffff, 0x400}, {r1, 0x20a}, {r2, 0x8003}, {r4, 0x8000}, {r5, 0x4010}, {r6, 0x200}], 0x8, 0xfff) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x1, 0x0, 0x1, 0x100}, {0x40, 0x9, 0xbd, 0x3}, {0x5, 0x26, 0xa, 0x10000}, {0x929, 0x6, 0x5, 0x7}, {0x4, 0x4, 0x1, 0x5}, {0x7, 0x4, 0x2, 0x80000000}, {0x7, 0x5, 0x80, 0x2}, {0x5, 0x5, 0xf, 0xffffffff}, {0x6, 0x0, 0x7, 0xfa8a}, {0xfff9, 0x9, 0xe8, 0x400}]}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8000, 0x8, 0x7, 0x5, {{0x44, 0x4, 0x3, 0x1a, 0x110, 0x66, 0x0, 0x1, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0x98, 0x0, 0xf, [0x6]}, @cipso={0x86, 0x17, 0x3, [{0x1, 0x11, "938aa109504bd6aae251d8bc7cbd16"}]}, @lsrr={0x83, 0x7, 0x37, [@local]}, @lsrr={0x83, 0x7, 0x12, [@empty]}, @timestamp_prespec={0x44, 0x4c, 0xce, 0x3, 0x0, [{@rand_addr=0x64010100, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff5f}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x2}, {@rand_addr=0x64010100, 0x1ea3}, {@loopback, 0x8}, {@multicast2, 0xfffff65a}, {@empty, 0x1c00}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x8}]}, @timestamp_addr={0x44, 0x3c, 0xbb, 0x1, 0x4, [{@loopback, 0x401}, {@local, 0xf061}, {@local, 0x1ff}, {@multicast2, 0x8}, {@multicast2, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x2}]}, @rr={0x7, 0x1f, 0x6b, [@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @remote, @multicast2, @empty]}, @cipso={0x86, 0x27, 0x1, [{0x1, 0xa, "884d9c17c32db240"}, {0x0, 0x12, "63e73bf5ab69ad1917aeb46d51ce46d5"}, {0x5, 0x5, "d87dd3"}]}]}}}}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x86, '\x00', r7, r3, 0x3, 0x1, 0x3}, 0x50) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x12, 0x10, 0x70bd27, 0x25dfdbfe, {0x5, 0xf9, 0x8, 0x4, {0x4e24, 0x4e20, [0x9, 0x7, 0x8, 0x2], [0x6, 0x1, 0x0, 0x80000001], r7, [0x1e, 0xfffff801]}, 0x8e54, 0x3}}, 0x4c}}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r9 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='rpcgss_createauth\x00', 0xffffffffffffffff, 0x0, 0x8ffb}, 0x18) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000740), 0x3, 0x280000) ioctl$USBDEVFS_RELEASEINTERFACE(r10, 0x80045510, &(0x7f0000000780)=0x5) (async) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000840)={0x1}) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x8010, r6, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x140, &(0x7f0000000880), 0x0, 0x4) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) (async) ioctl$BTRFS_IOC_FS_INFO(r8, 0x8400941f, &(0x7f0000000900)) (async) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000d40)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x148, 0x3, 0x6, 0x101, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0xa}, [@typed={0x8, 0xf1, 0x0, 0x0, @uid}, @nested={0xe, 0x146, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @uid=r12}, @generic="52d5"]}, @generic, @typed={0x8, 0x16, 0x0, 0x0, @fd}, @nested={0x4, 0x147}, @typed={0x8, 0x116, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x22, 0x93, 0x0, 0x1, [@generic="63664c05d7674aa46361865e64c9f0de3898623f7290ba438b5d", @nested={0x4, 0x125}]}, @generic="c57b2b6c02e6036e25ff344c41a66d3b180ff12ed19071bf210944afe874676b21a41f7d1ec49d5fbc94405b57a30787c39c52f4f05c8a1d14d8d2515372e1466c370363cb20b79be2415d2042bdb42294d8b1", @generic="de1777ea706e0149c71e3bf7c6caa5e20794e6da0471f438841bd4eb7369236b", @generic="7b029f50d94136e00c2a641dcecf71d5fb381624618007af1571bcdb9e1c7f28368a1f88e599e585e78d32ed956f3c940676b517a1ca621364cbea3c8489c84dfe166b5325c01fc83e0700b1b697e76f3dd9bba98c025a44e414a87f9ddfee62ac7291a30b762f997cf5b83f415f0804"]}, 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000f80)=0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000fc0)=0x88a) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x901) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001080)={'syztnl1\x00', &(0x7f0000001000)={'ip6_vti0\x00', r7, 0x2f, 0x3, 0x7, 0x81, 0x50, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0x6, 0x3}}) 8.089979861s ago: executing program 0 (id=884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a300000060005000100070000000800094000000001140008"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r1 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x210, &(0x7f0000000200)="$eJzs3c9uEl0UAPADpcB8+RbdmZiYjHGhq0Z9Ao2piZHEpIaF7prYVVnBBti0j+Er+F4+gOmKjRlDhylIpwRJB/zz+y3aA2fO5V5uuLDhkEXu673P0W7Xov4ikpjU4iDqUbgIAOBvMsmy+Jblfr26UcWUAICKrfH+/33LUwIAKvb+w8e3Lzudo+M0bUdcXgy7w27+P8+/ftM5eppeOZhXXQ6H3b3r/LN0+bPDNL8f/83yz/P69DrdjIhuM548yvPT3Kt3nfTn+lZ8qnjtAAAAAAAAAAAAAAAAAAAAAACwKw8iLZT29zk8XM4ns3x+a6E/0FL/nkbcL9oDz9sDZefbWBQAAAAAAAAAAAAAAAAAAAD8YQaj8dlJr3fanwetiFi8p1Fyze1BbTbwWhfvPqjHZuXJbJkbPGht9hRVu8CkfHPXCaLxu+zOpkF6VwO2im2+mUqitqI8y6ZB+augaItxa3kzIlZP7PHxpuuaZFnW+/KwPxhFtvLi+RnRKj86mtWcSAAAAAAAAAAAAAAAAAAA8O9a+Nb3De29XcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALZvMBoXv/I/Pjvp9U77g9HawXlE/B+lqWRhwOng7YjYv/oLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd+9HAAAA//+TmBrH") r2 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000003, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r3, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="4038347f3222ad4f531e3d114396f03bffa71d19b188da70b4e25c020d10e001dd8b3d2ed8ac24d7f6046541bbfe3b7eb3b518091d92c25d12d3ef202be7920e79530441cec11a46dff2b4e5ec8b45db30530b91de6eb6e614f155f9e120c0bc9bd12646129b559f230012565042cef2556525f5341c07b9b7f0e74048467a268b6d6799e2f46593ebdef2a1f4b4522e875b7f0f3e1b4b1a099acd", @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYBLOB="d28f017d60e15e8cc441fb2455273ff8ac9586911cc9e7578bd0d3f42a96cbdf5d74e8dbb21e0099795ddc0e99d94ada433a2b8ec2c524303a2c2f65b5d40026ca657edef6264d565767aab4639b777b1c57da0b95ba5f6dde418d3f26561e341445fd63b98ac6ef9a000294d7f64e9203e55e2a90834bcbf21cbc2f8a2a6a46b4"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f45f0000110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x80000000}, 0x7, 0x4, 0x42, 0x40, 0x1b, 'syz0\x00', "051b28b2e3d7d382b86df64dcfe664b81df03abc351e612c85e47d54d3570292", "03916a4e24e0d1299b96543029dfe34767112367f788ea9814e456de2713006b", [{0x7b, 0x7, {0x0, 0x11e}}, {0x9, 0x6, {0x3, 0x7dd449f1}}, {0x1000, 0x9, {0x2, 0x4}}, {0x4, 0x263, {0x2, 0x10001}}, {0x5, 0xa3, {0x3, 0x4}}, {0x8000, 0x1, {0x3, 0x40}}, {0xfd4, 0x4, {0x0, 0x7fffffff}}, {0x7, 0x3, {0x3, 0xfffffff9}}, {0x80, 0x3, {0x1, 0x10000}}, {0x800, 0x8646, {0x3, 0x6}}, {0xfffa, 0x200, {0x3, 0x6a}}, {0x400, 0x1, {0x3, 0x8}}, {0xe, 0x3, {0x0, 0x3}}, {0xfff, 0x8, {0x0, 0x7fffffff}}, {0x5, 0x5, {0x1, 0xc0000000}}, {0x5, 0x5, {0x3, 0xfffffffd}}, {0xc, 0x1ff, {0x1, 0x800}}, {0x2, 0x2, {0x2, 0xa1ed}}, {0x6, 0xff80, {0x2, 0x6f}}, {0x8, 0x3, {0x0, 0x400}}, {0xfff, 0x3}, {0x6, 0x3, {0x1}}, {0x3ff, 0x7, {0x2, 0x8}}, {0x9, 0xfff, {0x2, 0x5}}, {0xd2c, 0x4, {0x2, 0x5}}, {0x6, 0x3911, {0x1, 0x2}}, {0x4, 0x6e, {0x0, 0x2dcd}}, {0x4, 0x10, {0x1, 0x3}}, {0x97, 0xc, {0x2, 0x2}}, {0x1, 0x8412, {0x3, 0x8}}, {0x5, 0x1, {0x6, 0x5}}, {0x1, 0x0, {0x0, 0x9}}, {0x3, 0x3ff, {0x0, 0x40}}, {0x28, 0x6, {0x0, 0x9}}, {0xff7f, 0xffc0, {0x1, 0x9}}, {0xa7, 0xfff7, {0x2, 0xff}}, {0x5, 0xf57, {0x2}}, {0x8, 0x3, {0x3, 0x8}}, {0x59de, 0x7, {0x0, 0x81}}, {0xc811, 0xe, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x66d2}, 0x4, 0x9, 0x3, 0x8, 0x28, 'syz1\x00', "2ce027ee32e8d440e5e22051f16ae21376a60e2b2d048f59bbc2452a007da7f5", "45479ccfb7c6dc31c335cbc8e2b5a1feeaa182b183db782f9a6d21f4aff95c08", [{0x6, 0x8, {0x1, 0x122e0487}}, {0x7f, 0xbe7, {0x3, 0x7fffffff}}, {0x3, 0x8, {0x0, 0x7}}, {0x93, 0x3, {0x3, 0x6}}, {0x8, 0x4, {0x2, 0x1}}, {0x6, 0x3, {0x3, 0x400}}, {0x965, 0x0, {0x1, 0x4}}, {0x7, 0x0, {0x2, 0x6}}, {0x3, 0xb, {0x3, 0x6}}, {0x9, 0x9, {0x1, 0x54e}}, {0xa1b, 0xd4, {0x0, 0x4}}, {0x3ff, 0x40, {0x2, 0x1}}, {0x9, 0x9, {0x1, 0x3}}, {0x3, 0x8000, {0x1, 0x8}}, {0x8, 0x6, {0x0, 0x7}}, {0x6, 0x1a, {0x2, 0x80000001}}, {0x1, 0x9, {0x1, 0x2}}, {0x9, 0x9, {0x2, 0x4}}, {0x8, 0xead9, {0x2, 0x8}}, {0xfff7, 0x9, {0x2, 0x6}}, {0x8, 0xff, {0x0, 0x9}}, {0x8, 0xf, {0x2, 0x6}}, {0x200, 0x8, {0x3, 0x4}}, {0x1, 0x8000, {0x3, 0x8}}, {0x3, 0x4, {0x3, 0x6}}, {0x7f, 0x6, {0x2, 0x8}}, {0x1ff, 0x3, {0x2, 0x7}}, {0xf407, 0x3, {0x1, 0x10001}}, {0x401, 0x1, {0x1, 0x2}}, {0x1, 0x2, {0x2, 0x8}}, {0x26f, 0x3}, {0x100, 0xda58, {0x0, 0x6}}, {0x7, 0x3ff, {0x0, 0xff}}, {0xeb3, 0x8000, {0x1, 0xfffffffb}}, {0x29fc, 0x8, {0x2, 0x3a7}}, {0x4, 0x6059, {0x3, 0x80000000}}, {0x3, 0x3, {0x2, 0x1}}, {0xfff1, 0x6, {0x2}}, {0x40, 0x4}, {0x4, 0x8, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x8}, 0x38, 0xff, 0x0, 0x7ff, 0x9, 'syz1\x00', "f42f9514163af80d59af1d56961b9c32ff0bf5b475bc40abc23fcc6bd3fc2922", "b5704b59576271e236840e2aaad82d30818267ce4b1a5dd68cbd2261be9fa0d0", [{0x6, 0x3, {0x3}}, {0x5, 0xe, {0x3, 0xfffff800}}, {0x5, 0x7bc5, {0x1, 0x6}}, {0xf2dc, 0x20ed, {0x0, 0xcd75}}, {0x661, 0x8, {0x2, 0xfffffff7}}, {0x6, 0x9a37, {0x1, 0xe}}, {0x81, 0x1, {0x2, 0x4af}}, {0x80, 0x6, {0x1, 0x1}}, {0x75, 0x8, {0x1, 0x7}}, {0x3, 0xff, {0x3, 0x2}}, {0x2, 0xd70c, {0x1}}, {0x8, 0x9, {0x1, 0x8000}}, {0x5, 0x8, {0x1, 0xffff}}, {0x3, 0x6}, {0x1, 0x9, {0x3, 0x18f}}, {0xeef4, 0xfff, {0x2, 0x600000}}, {0x4, 0x7, {0x0, 0x5}}, {0x400, 0x62, {0x1, 0x7fffffff}}, {0x88, 0x4, {0x3, 0x1}}, {0x6, 0x3, {0x0, 0x101}}, {0x9, 0x1, {0x1, 0x9}}, {0xb0, 0x8, {0x3, 0x3}}, {0x35f, 0x6, {0x1, 0x6}}, {0x0, 0x9, {0x1, 0x8}}, {0x9, 0x4, {0x0, 0x3}}, {0x3, 0x3, {0x0, 0x3}}, {0x3, 0x200, {0x3, 0x3}}, {0xa11c, 0x4, {0x3, 0xfff}}, {0x200, 0x0, {0x2}}, {0xf5, 0x5, {0x2, 0xa9d}}, {0x2, 0x2, {0x0, 0x9}}, {0x8, 0x2, {0x1, 0x7}}, {0x7, 0x8, {0x3}}, {0x1, 0xe81, {0x2, 0x800}}, {0x6, 0xff, {0x0, 0xfffffffa}}, {0x7, 0x9, {0x1, 0x9}}, {0x7, 0x6, {0x3, 0xff}}, {0x7fff, 0x2, {0x3, 0x2}}, {0x4, 0x7, {0x3, 0x1c}}, {0x1, 0x6, {0x3, 0xd}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40000}, 0x90426e515434c9f2) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000180)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r10, 0x12) r11 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180200008300000000000000000000008500000029000000850000005400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_procfs(r10, &(0x7f0000000c40)='net/llc/core\x00') 7.965910656s ago: executing program 0 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x20) (async) rename(&(0x7f0000000040)='./file1\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r7, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b1, &(0x7f0000001100)="$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") (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x0, 0x97}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 7.88033956s ago: executing program 0 (id=890): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@barrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@dioread_lock}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf61c1cf9600000007020000f8ffffffb703000008100000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000800)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004044) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="38012bbd7000ffdbdf25070000003400028004000400040004000800010006000000040004001c00038008000100ffffff7f080001000200000008000100ef1d000044000980080002000500000008000200000000000800020003000000080001000700000008000200f8f50000080001000101000008000100930c0000080002000300000004000180"], 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, 0x0) 7.803823503s ago: executing program 0 (id=892): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x2f, 0xb, 0x5, 0x5, 0x5b03baffeae35d7, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0xc9b2}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x4080, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @generic={0x7f, 0x1, 0x3, 0x18, 0xf169}], &(0x7f0000000240)='GPL\x00', 0x2, 0xe6, &(0x7f0000000380)=""/230, 0x41100, 0x42, '\x00', r0, 0x25, r1, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x4, 0x7, 0x39a}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x0, 0x5, 0x43, 0xa}, {0x1, 0x5, 0xc, 0x9}], 0x10, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x200, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x18, 0x81, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r3 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000f40)=ANY=[@ANYBLOB="0700000000000000ec0000000000000000000000fc0000000300000024bb00000200000000000000f51300000000000000010000000000000000000000000000000000000000000089020000000000000000000000000000030000000000000001000000000000807f00897d088028d8c042701ac0586df2d80000000000000000000000000000000000000000000000100000000000000000000000000000030000000000000003000000000000000300187700"/202]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000007800)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x26}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESDEC, @ANYBLOB="e8d15f50b30ff819ef4516f4b451c6d311d5c2a71a219e84ac63f886564867c11e4eeb259a47a4420a86e9875a9909f2aafaa19e8bf603c48df9eed847f98509d967233e3b3424befe462ac13570c73a2819639e749dec84662002db9b9e31af54da63e7d70e6265752e3e398e5bebfe2a7253d776e744d0e9b218ef10bf148555c25519d8531fa25a0563136adc847a230f3f970c5f4ba76b7962f899007d96bd08766410aea901c2ff860274e83d1f794c4d2195dee5d8c1759386", @ANYRES8=r5, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYBLOB="8955141d21a4eda1d1d17eb9753cb5796b24a54cdc21b9b4b08563205703fb73ed8a8125c292229fac1cc4ff136b62e196ca1f3fcca3c103be2337256d394e51ccdacd062ccea74c0fb4e9ac4d3cfdc6359debe4746d53b639ac999afc8f721b8979f18c7c501380f7cfcbf06eb032689ecd83b33aa296ecc87a324ed1138ae4c7b0d1dbcec4386581c16316a35356ea1eeb246e136aa7a51331c67240d3d5a89af9db56", @ANYRESDEC, @ANYBLOB="1db5439e094c5d361a6a44dfb1a283ed4a35c2e7aa6202104f875c2aa0f21587f48c7aa8a1a33de9acac77ad6f1fe7f48cdd41ee560c1a611d5bb058d83da10c060529f5f15a40ad4f89"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000c00)={0x7f, "7c23e523722057151fd4afe2f9a68744cabc244fcf9cffae32e0ff3b18d7fc341e2459b654ecb88c5df56bfa7cc5d2a15a25f3e0c14a43bcf5f0bed13e0bf7c1c0d855d1a44e2eda2ae2715327f30d77dc65812136e11216259c6c453035e0d8c0d93eb97ad6d9e193df57810c927f319f3471f48369812aabef60c0ca8791a6f73f0d153f804f2d79f10ec3bbd583a9fb965960c44dde2d4aacb38ac0d362d9adb1e6d590100e9484e0104461f032a8b992ccaf8abcbf15af6e6c7b58332ae89b994db34361730515f76d04b95958fb640ecba808814fa3a759f395608230a021cbaa7f59a7c860fa14c50d259e23b08fc430d3a7df7ff784d28d4942a967c87d231acef0bebb09e47d997357d9558c02c1420572cae92875137938370dc4a8e9b85df6204e5575ebe8596b5fbe24d856d8d9093cb70c0f8f58695984feeb95347cc49ffd864a562758d2559b5d4bc36582dc13f5db739c1478343d2df4f9394684b191d61f8e5f522362a2e31b195546139077661471d67006fae0fbfe1efc81b2b569c34e59f0dade58ff8d4d3bcb498d2cd68f71cf214104d5d5738db1526e34fbda2227638181a096d176e54176435556fa0657834f675a89ab3d3c46ff5890c7490c1b200a3265b20a84a491600306de2d64e6e5614f4bb954ae1c5b694beb6af548fa97d69833d49c3703bf1a4cce4257ef788fbcecd755b36432b984"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt(0xffffffffffffffff, 0xff, 0x800, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.994170648s ago: executing program 0 (id=901): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7eba07d4d7c2df8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000000000000000000000a0000040900010073797a310056752b000000080005400000002b08000a40fffffffc140000e81000010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0xf, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf7) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x20000000000002c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000400)='./cgroup/../file0\x00', 0x214460, &(0x7f00000005c0)={[{@resuid}, {@dioread_nolock}], [{@smackfsdef={'smackfsdef', 0x3d, 'ext2\x00'}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x9a}}, {@obj_user={'obj_user', 0x3d, '\xb6(\x1f\xf0\xbc\xba\x1b\xc9\xe6f\x8b\x14k\xcb*\xe0G\x15\x01\x00\x00\x00\xb2\xf9#\xc3\x04\x00'/38}}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000060000ffc7b026562a86dd6001110000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000000001090780200000000000000c8224111d87c2d60154551bed4cd4f741e4461acd1d6bde1c1d555ef792a2ed20d37185d1f88b5f92358d1d28fba722b"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xde0, 0xfe, 0x0, 0x7ffc9ffe}]}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000240)=""/207) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1a, 0x10, &(0x7f0000001080)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYRES64=r5, @ANYBLOB="c3dfbc9b784f92a3aafb3459f565faee54b2af9b1eeda9eadc5d51989ec2666570ae714fd4db210eb0b58106bdf6726f1b3edc8d4cbb7c44e44ec7d4c7b6583bf01c17584cea5353fb30c04bebcaa1a3467f1ee2eeb8f0eb98d5718734197040273b419a58b80c6e12a651bd1423d040a1dad3de30e1199ed8adda10d6190fbdef9c0187824006ea776e3a72", @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=r11, @ANYRESHEX=r3, @ANYRESDEC=r10, @ANYRES32=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.829975915s ago: executing program 33 (id=901): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7eba07d4d7c2df8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000005000000000000000000000a0000040900010073797a310056752b000000080005400000002b08000a40fffffffc140000e81000010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0xf, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf7) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x20000000000002c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000400)='./cgroup/../file0\x00', 0x214460, &(0x7f00000005c0)={[{@resuid}, {@dioread_nolock}], [{@smackfsdef={'smackfsdef', 0x3d, 'ext2\x00'}}, {@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x9a}}, {@obj_user={'obj_user', 0x3d, '\xb6(\x1f\xf0\xbc\xba\x1b\xc9\xe6f\x8b\x14k\xcb*\xe0G\x15\x01\x00\x00\x00\xb2\xf9#\xc3\x04\x00'/38}}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000060000ffc7b026562a86dd6001110000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000000001090780200000000000000c8224111d87c2d60154551bed4cd4f741e4461acd1d6bde1c1d555ef792a2ed20d37185d1f88b5f92358d1d28fba722b"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xde0, 0xfe, 0x0, 0x7ffc9ffe}]}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000240)=""/207) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1a, 0x10, &(0x7f0000001080)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYRES64=r5, @ANYBLOB="c3dfbc9b784f92a3aafb3459f565faee54b2af9b1eeda9eadc5d51989ec2666570ae714fd4db210eb0b58106bdf6726f1b3edc8d4cbb7c44e44ec7d4c7b6583bf01c17584cea5353fb30c04bebcaa1a3467f1ee2eeb8f0eb98d5718734197040273b419a58b80c6e12a651bd1423d040a1dad3de30e1199ed8adda10d6190fbdef9c0187824006ea776e3a72", @ANYRESDEC, @ANYRES8=0x0, @ANYRES8=r11, @ANYRESHEX=r3, @ANYRESDEC=r10, @ANYRES32=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.081310594s ago: executing program 6 (id=903): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) pipe(0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) preadv2(r5, 0x0, 0x0, 0x8, 0x7, 0xe) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) select(0x40, &(0x7f0000000000)={0xb, 0x401, 0x0, 0x1, 0x7, 0x0, 0x8000000000000000, 0x4}, &(0x7f0000000040)={0x2, 0x2, 0x9cbc, 0x100000001, 0x2, 0xfffffffffffffc01, 0x1}, &(0x7f00000001c0)={0x2, 0x80000001, 0x100, 0x8, 0x0, 0x5, 0x6, 0x2}, &(0x7f0000000280)={0x0, 0x2710}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x26, 0x4, 0x0, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r10}, 0x10) socket$netlink(0x10, 0x3, 0x0) 3.762665968s ago: executing program 6 (id=954): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, &(0x7f0000000240)=0x9, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="82b2d3b115c706325b6ef619dd7c978afc78fbd493854208bcf3e5c177bdd87ca7a57c31d14862d57b1c6669d1565e02805cdb58e4ac424e2935029670c870ab676eed761b54f2", @ANYRESOCT=r3, @ANYRES64=r3], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'batadv_slave_1\x00', &(0x7f0000000ac0)=@ethtool_sfeatures={0x3b, 0x0, [{0x484, 0x49bf}, {0xd0, 0x2}, {0x2, 0x3}]}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r5, @ANYRES32=r6, @ANYRESHEX], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="18000000010600000000000000000700000000000000c7b939362eca1b02772f63c9e800dd6903f090d478b20307deb8e6bbdc185a3c1420770f602fcbb2e07521cfe07d46a28af779417cd3f4fbdf8d96d7ae179b9824dff4bb0eb96af5f2c06a5a091b8bfa6c4af26cf037c3240000"], 0x18}], 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1804011, &(0x7f0000000380)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@nojournal_checksum}, {@sysvgroups}, {@noload}, {@data_ordered}, {@discard}, {@nogrpid}, {@debug}]}, 0xd, 0x615, &(0x7f0000000400)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETAF(r9, 0x5408, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.887962685s ago: executing program 5 (id=963): getpid() (async) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002000000000000080000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r10, &(0x7f0000000040), 0x8) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.55166483s ago: executing program 5 (id=969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000004}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x1c, 0xc, &(0x7f0000001480)=ANY=[], 0x0, 0xab, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1009d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572001000018009000100"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x7f18, &(0x7f0000000080)={0x0, 0x79ae, 0x20, 0x7ffd, 0x32c}, &(0x7f00000012c0)=0x0, &(0x7f0000001280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0xfd0, 0x4c5, 0x8, 0x0, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af151000000fe00"/28, 0x1c}], 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) r14 = pidfd_getfd(r13, r13, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r14) 2.515538291s ago: executing program 3 (id=972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x528, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x354, &(0x7f0000000240)={0x0, 0x6862, 0x80, 0x3, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x10847ba, 0x95c, 0xe, 0x0, 0x2e) 2.392419777s ago: executing program 5 (id=974): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3d}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff00000000fdfffdff850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 2.374839467s ago: executing program 5 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2411, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x0, 0x5, 0x3, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$perf(&(0x7f0000036000/0x4000)=nil, 0x4000, 0x2, 0x413c010, 0xffffffffffffffff, 0xffffffff) (async, rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x100}, 0x18) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async, rerun: 64) r8 = socket(0x9, 0x6, 0x0) (rerun: 64) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x9c, r9, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 32) r10 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000002", @ANYRES32], 0x38}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r11}, 0x10) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 2.012392203s ago: executing program 1 (id=984): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000340)={0x0, 0x200, 0x0, [0x2, 0x2, 0x4, 0xa4, 0xe4], [0x8, 0x1, 0x75, 0x3, 0x8000, 0x100000001, 0x8000000000000000, 0x2, 0x1, 0x4, 0xffffffff, 0x6, 0x14001, 0x1, 0x100000000, 0x7, 0x40, 0x7, 0x1, 0x10000, 0x1, 0x9, 0xacda, 0x0, 0x7, 0x0, 0x0, 0x4, 0x2cba223d, 0xfff, 0x1, 0x2, 0x2, 0xffffffffffffffff, 0x4387, 0x31e4, 0x100000000, 0x10, 0x3c, 0x10000, 0x0, 0x1, 0x8, 0x814c, 0x9, 0x4, 0x3, 0x15, 0x9, 0xb75, 0x76a588b2, 0x1, 0x6, 0x4, 0xfff, 0x3, 0x4, 0x3, 0xa, 0xff3, 0x200, 0x1, 0x9, 0x9, 0x7, 0x9, 0xe, 0x0, 0xbda9, 0x3, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x6, 0x6, 0x3, 0x40100000, 0x3b, 0x1, 0x7fffffffffffffff, 0x5, 0x4, 0x4000000002, 0x9, 0xfffffffffffffffa, 0xea8e, 0x2, 0x0, 0x8, 0x4, 0xe, 0xe, 0x8000, 0x3, 0x60f, 0x7, 0x1b, 0x2c, 0x3, 0x9, 0x714a, 0x380000, 0x101, 0xfffffffffffffffb, 0x1, 0x7, 0x9, 0x200000000000000, 0x3, 0xfffffffffffffff7, 0x10, 0x0, 0x0, 0x90b, 0x8, 0x5, 0x232, 0x80000000, 0x9, 0x3ff, 0x8]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000780)={r2, "fc0273758f9fab20f6d58c31d7f3ade0"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x11, 0xfffffffffffffd9e, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 1.977426744s ago: executing program 5 (id=986): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) execve(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket(0x18, 0x3, 0x0) getsockname$inet(r6, 0x0, &(0x7f0000000000)) futex(&(0x7f00000001c0)=0x1, 0xc, 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) connect$unix(r8, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r8, 0x0, &(0x7f0000000000)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) 1.927957757s ago: executing program 6 (id=987): r0 = io_uring_setup(0x424a, &(0x7f0000000000)={0x0, 0x1cda, 0x20000, 0x0, 0x222}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000100)=0x8, 0x4) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140)) write(r0, &(0x7f0000000180)="c55b57b0edd1e7e388eb2b99a9450f0622bb45b8450c79701983c293c7", 0x1d) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000001c0)={{r0}, {@void, @max}}) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) fcntl$setsig(r2, 0xa, 0x6) socket$netlink(0x10, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000240)={0x11, 0x6, 0x1, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @local, @dev={0xfe, 0x80, '\x00', 0x38}]}, 0x38) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0xa0000000, 0x10000, {{0x24, 0x4, 0x0, 0x21, 0x90, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @empty, {[@end, @timestamp_addr={0x44, 0x44, 0x21, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@empty, 0x5}, {@empty, 0x2}, {@empty, 0x1}, {@local}, {@multicast2, 0x7fffffff}, {@private=0xa010102, 0x6}, {@empty, 0xffff}]}, @timestamp_prespec={0x44, 0x34, 0x2b, 0x3, 0xf, [{@remote, 0x6}, {@rand_addr=0x64010101, 0x8f6}, {@multicast2, 0x5}, {@empty}, {@rand_addr=0x64010102, 0xd}, {@multicast2, 0x6}]}, @end]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@newtclass={0x2c, 0x28, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0x5}, {0xb}, {0x10, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r5 = syz_open_dev$evdev(&(0x7f00000004c0), 0x6, 0x400181) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000500)=""/26) r6 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x3}}, 0x10) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x3000000, 0x80010, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000c99000/0x10000)=nil, 0x10000, 0x2000002, 0x8810, r0, 0x10000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x31, 0x0, r3, &(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file0\x00', r3, 0x1000, 0x0, {0x0, r9}}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(r1, &(0x7f00000006c0)=""/66, 0x42, 0x40000000, &(0x7f0000000740)={0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, '\x00', 0xc}, 0xd}, 0x1c) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000780)) r10 = perf_event_open$cgroup(&(0x7f0000000840)={0x1, 0x80, 0xb, 0xf1, 0xe, 0x0, 0x0, 0x4, 0x4c041, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f8a, 0x4, @perf_config_ext={0xce8, 0xfffffffffffffffb}, 0x101, 0x77e7, 0x904c, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x0, 0x2b8b00000000000}, r3, 0xf, r6, 0x2) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x60f) r11 = memfd_secret(0x80000) recvmmsg(r11, &(0x7f0000005d00)=[{{&(0x7f00000008c0)=@ax25={{0x3, @null}, [@default, @bcast, @rose, @null, @netrom, @remote, @null, @default]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/214, 0xd6}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/98, 0x62}, {&(0x7f0000000b00)=""/158, 0x9e}, {&(0x7f0000000bc0)=""/231, 0xe7}, {&(0x7f0000000cc0)=""/94, 0x5e}, {&(0x7f0000000d40)=""/130, 0x82}], 0x7, &(0x7f0000000e80)=""/149, 0x95}, 0x1}, {{&(0x7f0000000f40)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000fc0)=""/116, 0x74}, {&(0x7f0000001040)=""/15, 0xf}, {&(0x7f0000001080)=""/88, 0x58}, {&(0x7f0000001100)=""/196, 0xc4}, {&(0x7f0000001200)=""/22, 0x16}, {&(0x7f0000001240)=""/159, 0x9f}], 0x6}, 0x2}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001400)=""/217, 0xd9}, {&(0x7f0000001500)=""/61, 0x3d}, {&(0x7f0000001540)=""/66, 0x42}, {&(0x7f00000015c0)=""/184, 0xb8}], 0x4, &(0x7f00000016c0)=""/110, 0x6e}, 0x1}, {{&(0x7f0000001740)=@xdp, 0x80, &(0x7f0000002c80)=[{&(0x7f00000017c0)=""/224, 0xe0}, {&(0x7f00000018c0)=""/102, 0x66}, {&(0x7f0000001940)=""/231, 0xe7}, {&(0x7f0000001a40)=""/188, 0xbc}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/17, 0x11}, {&(0x7f0000002b40)=""/225, 0xe1}, {&(0x7f0000002c40)=""/16, 0x10}], 0x8, &(0x7f0000002d00)=""/165, 0xa5}, 0x2}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002dc0)=""/216, 0xd8}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000002f80)=""/108, 0x6c}, {&(0x7f0000003000)=""/206, 0xce}, {&(0x7f0000003100)=""/35, 0x23}], 0x5, &(0x7f00000031c0)=""/43, 0x2b}}, {{&(0x7f0000003200)=@nfc, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/217, 0xd9}], 0x1}, 0x6}, {{&(0x7f00000033c0)=@nfc, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003440)=""/229, 0xe5}, {&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/171, 0xab}], 0x3, &(0x7f0000003700)=""/12, 0xc}, 0x8000}, {{&(0x7f0000003740)=@tipc=@id, 0x80, &(0x7f0000004880)=[{&(0x7f00000037c0)=""/173, 0xad}, {&(0x7f0000003880)=""/4096, 0x1000}], 0x2, &(0x7f00000048c0)=""/253, 0xfd}, 0x5}, {{&(0x7f00000049c0)=@isdn, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/4, 0x4}, {&(0x7f0000005a80)=""/93, 0x5d}, {&(0x7f0000005b00)=""/251, 0xfb}], 0x4, &(0x7f0000005c40)=""/152, 0x98}}], 0x9, 0x40000340, &(0x7f0000005f40)={0x77359400}) 1.879991249s ago: executing program 3 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x40004) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf28fba200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000808500000011800000950000b1000000007554123a28a96513d1d00b74c153529dc56d1193f5b1b9c14fcbb3817135984acce491f783975c0337403dbd18a384a7f65d286d5e6de36e448f80cbc36676470a68517d7e5818291d4e0ee59be0ace9d8ee3289fc225350b5c0659bc25bd8aafd8044e61ec3bb348c81d5b18dd46cbe2c8b40c717ae18c04dc1932fbf6b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) write$ppp(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x1000) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8001, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) 1.768893324s ago: executing program 3 (id=991): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000280)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.481272706s ago: executing program 5 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='gpu_mem_total\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0x4, 0x4, 0x350, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], 'macvlan0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0xa}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x4, 0x4}}}, {{@ipv6={@private1, @private2, [], [0xffffff00, 0xffffff00, 0xff000000], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x2, 0x4, 0x5}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x201, 0x5}, {0x3, 0x6, 0x7}, 0x7f, 0x1000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) writev(r3, &(0x7f0000000c00)=[{&(0x7f0000000340)="77dd16a3e6d48c265ab9d4016ae10ab2b8a56f624d9b877aff399be493115ef65056a59ed9b765bbb92596fc07409e057d6fa84898fa147d1076f75ba526519365b983af2c09e94ce99e548763ed76baf61f1af81a50ddcbe15fa4f570b7eca5fa9669bd0c31a3306dac7dc507252dfe3d6fb7f47cd6293fb075fc3b016ea7bf37e35de67dd97ed1b7764955fb4de0f6ee2407b4c906073fab4e24b5bfb6c7ac4b2a15696741821a254a572a185df53d564a5d8dbd8f6921dc581dbef994f84b3ff8fed0", 0xc4}, {&(0x7f0000000840)="029b65153b8dede0169bf991d5d565e366e67285e355956aa647039357e817377b100a71aad8f95595d4218fcbde5a317a432b5b72d496d5244b8f91e0589fd189a936cac1c03745af9da571ba0e2006cdf947aa13aae7f6b3c1d6d32c77cd9796971f6b8a711aaa3ead233d15c63acf12a665dc", 0x74}, {&(0x7f0000000000)="cc36b41af52ebab6f370d9e9f4b17b90c099d2aaea178b63fb3c", 0x1a}, {&(0x7f00000008c0)="53d8cc12bce65a5513d502087b4d7e99b3f3861150bcd2701767a0d49fa4e6827ff59bda3dbbcb644e5f8dbc7ac40e6e9d6ce237c54d964cfe0e673647d60a693cd756b6d2b6ee40b40756c28085d25df9a3746cf9580475638b6fae5e", 0x5d}, {&(0x7f0000000a00)="7b9021e377498cd99e4c9bfae9c2e1b3ffa9583ad37b48af587fde32460385e6e300c9f4a6dc347d1b025ce3c2280444b0cddad92d1578f16ca1943eaceb0a53f11ccb904bb04bd442c6d5c0769290d5e0ae1051309a7333efa1cd7679893ff69b1188d4f7227fddf991ed", 0x6b}, {&(0x7f0000000a80)="6612087dc1cf697c5c005944e7487f025e673a5cd32a9d780f9071e5b58203d9984c07b2dc7b5e6614aafd60d834ea20a72ae4bf67543776e84ed1eb188956f502dec734e27ecb6155bda3ae5c7d07b4e9622dc5517d62a762704acecd5b8dc43ae38ac093a058ac6313fc48740acdf0", 0x70}, {&(0x7f0000000080)="c4bd769d7fd0457908f8b420e52b92cc294e11", 0x13}, {&(0x7f0000000b00)="e75b04e521a3e02ac7cdb19019668fc1c182942e9f1b0a996372a1bd1f21e60180557475dbaa5fbf1db56e501872b7d82f2c31fdafe9bc4cdbe231e0c0e3cae4e946220a9b8e104db90367948725572ae258ad23af63f643356c4e1109e7950dd892d230f79dceb04fce74a65b91289843917915d011de9f7a8389f19f70f1b455b35f74531d84f54a689de767166d10b3e8707b62588a73084033b268ffbe08da6ecc172fc62f340a209d8801c7edf7f5039d3262de21eb68ea1c0417f2dde8a35cf1f2e5829da01588af2b963fa235", 0xd0}], 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x35, 0x0, @val=@perf_event={0x400000000000009}}, 0x18) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1018e58, &(0x7f00000005c0), 0x4, 0x62c, &(0x7f0000001140)="$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") (rerun: 32) 1.240647177s ago: executing program 1 (id=994): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x206010, &(0x7f0000000400)={[{@fat=@debug}, {@nodots}, {@dots}, {@fat=@usefree}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {}, {}, {@fat=@fmask={'fmask', 0x3d, 0x80000008}}, {@fat=@usefree}, {@fat=@discard}, {@fat=@check_strict}]}, 0x0, 0x1c5, &(0x7f00000008c0)="$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") (async, rerun: 32) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) (rerun: 32) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "2bdbe9a3b8a104fea317f01c9b958e23011cc1ecd35b941eb78ce02970849999419cd5f837e90877b93221ccbdb35303cc6c071996fd8e587a1d2627fb2ea0d2", 0x39}, 0x48, r0) 1.060310794s ago: executing program 4 (id=995): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x50e040, 0x5d) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x90, 0x0, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {0x6d4}}}, 0xb8}}, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 977.865148ms ago: executing program 4 (id=996): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r6, r6) r7 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766646e6f3d219fa3b9c5c8731586a9c8e9dae9d0eabea33cfe56c6d53fa54b9b3135574afb44982d4da260d01a1cebddee6aa580c640372e18e6f845ae2d9090041d2a3745128d7f976d14b6becccacc2acfe0af72b797712c601ae30dd62e4f5b8da821385470c09406d156da1ffdc06aa627218113a7e02bd7b7978903f5e6803a5fc38bf491fe8c1ff01b446e9518c85ab8f3419c3b588db0ff0d8da8d200"/172, @ANYRESHEX=r8, @ANYBLOB=',\x00']) perf_event_open$cgroup(&(0x7f00000008c0)={0x3, 0x80, 0xff, 0x18, 0x0, 0x5, 0x0, 0x8, 0x8840c, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x83d, 0x2, @perf_bp={&(0x7f0000000400), 0xc}, 0x1, 0x45f0, 0x5, 0x3, 0x6, 0xdc2d, 0x4ee8, 0x0, 0x6, 0x0, 0x1000}, r6, 0x8, r7, 0xa) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030d0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de43944af030006000000000002004e22ac1414bb000100000000000002000100000000000000070c0100000003000500000000000200"], 0x68}, 0x1, 0x7}, 0x0) sendmmsg$sock(r5, &(0x7f0000000800)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)="622c1c5a1e514352946b3f06b0ba1e52ca37e4ca8dbeb87cd594a4d245b2d095d9be02519bb778ebbc0b553cd7a5b352349e8415bbabbea52d14b680cc27cf9f18a595def82fbd141abcb18f5ff0961f27ab9c4174adc136f36c68c8e842d773446b090cfc699ac0d400e0c8c7b577", 0x6f}], 0x1}}, {{&(0x7f0000000380)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000540)="ab9161021bfa983b26ce44c2296ac1486747e195da2e6f0411dbf2855b917c8cfbd137be52ab9d245204268acc60a2f6fefd6686c4d5fdcf5d1d77fa1d59cd68d06d156d3463a1e3e7923082ee23ca9cfc094d86c0485c8595708fd25279700064f4c01af22c9219223ca011701ed238382ad292f5d66658b587c620c1", 0x7d}], 0x1, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0xe7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3120}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xa8}}], 0x2, 0x4) 867.210773ms ago: executing program 1 (id=997): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x3e, 0x2, '\x00', 0xff, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x25dfdbf8, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000070a0b040000000000000000020000055c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000001108000240000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xb0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095", @ANYBLOB="2bed6dd25a8d62083340e1359c1cf4a57d3e45c83ac8947391ce2dd8cde4f2003fca23c21bdf3bd20a27d8d261891aa7d4db43e0a7bff81211bfff998cd56a3c4be6adf1663ebf128d2dfb85179a7997bfd13d6f01aef2c5171548870a72ea067590b80294", @ANYRESOCT=0x0, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x5b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900050027bd7000000000000000020000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4004812}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) eventfd(0x0) 704.0817ms ago: executing program 4 (id=998): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) close(r3) pipe2(&(0x7f00000006c0), 0x0) (async) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r4, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x509900) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000080)={0x45b1, 0xc, [{0x5}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0xb, 0x1}, {0xd, 0x1}, {0x6, 0x1}, {0x7, 0x1}, {0xf}, {0xa}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x400000ffc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x1}}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000", @ANYRES32, @ANYBLOB="fdffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000004"], 0x50) socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 703.74307ms ago: executing program 1 (id=999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x528, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x1008, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x354, &(0x7f0000000240)={0x0, 0x6862, 0x80, 0x3, 0x1c0}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x10847ba, 0x95c, 0xe, 0x0, 0x2e) 625.173283ms ago: executing program 3 (id=1000): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x1f}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x3}]}}]}, 0x44}}, 0x2000400c) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[], 0x0) (async) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0x2}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xa4, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200088c1}, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r4, @ANYBLOB="00042bbd7000fedbdf2509000000080002000700000005000500020000001c000680060005004e2200000600010002000000060005004e210000050005000200000040000180050002005a00000008000300ac1414bb060005004e21000008000700", @ANYRES32=r1, @ANYBLOB="1400040000000000000000000000ffff00000000080003007f00000108000400010001003400068008000600150000000500020002000000060005004e23000008000300ac1414aa08000700", @ANYRES32=r1, @ANYBLOB="060001000a00000008000200030000003400068008000300e000000214000400fe8000000000000000000000000000aa14000400fe80000000000000000000000000002f"], 0x100}, 0x1, 0x0, 0x0, 0x20002880}, 0x0) 407.813692ms ago: executing program 4 (id=1001): r0 = socket$inet(0xa, 0x801, 0x84) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000580)='cpu<-0||!') (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000000801010000000000000000070000000900010073797a31000000001c0004800800014000000002080002400000070f08000140200000000600024089140000050003002f"], 0x78}, 0x1, 0x0, 0x0, 0x10000840}, 0x0) (async) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="943d", 0x2}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) (async, rerun: 32) close(r4) 304.328277ms ago: executing program 3 (id=1002): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) execve(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) syz_io_uring_setup(0x70ca, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket(0x18, 0x3, 0x0) getsockname$inet(r6, 0x0, &(0x7f0000000000)) futex(&(0x7f00000001c0)=0x1, 0xc, 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) connect$unix(r8, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r8, 0x0, &(0x7f0000000000)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600) 275.172148ms ago: executing program 1 (id=1003): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@rand_addr=0x64010102, @multicast1}, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0xa, 0x94, 0x9, 0x40, 0x0, 0x10, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x8}, 0x10, 0x3, 0x300000, 0x6, 0x9, 0xae71, 0x6, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x81, 0xdc, 0x5, 0x0, 0x0, 0xa, 0x101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8cd9, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x12083, 0x81, 0xf, 0xe, 0x3f, 0x6, 0x9, 0x0, 0x2, 0x0, 0xa630}, r2, 0x9, r4, 0x9) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000200)={0x0, 0x8, 0x7fc, 0x7, 0x2}) r5 = socket$kcm(0x29, 0x7, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r5, 0xe2651000) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000240)={0x2, 0x9, 0x3}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x3, 0x0, [@empty]}, 0x18) write$P9_RREADDIR(r1, &(0x7f00000002c0)={0x87, 0x29, 0x2, {0x7, [{{0x8, 0x2, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x3, 0x2}, 0xfffffffffffffff7, 0x7, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x1, 0x6, 0x7, './file0'}, {{0x2, 0x1, 0x5}, 0x2, 0x6, 0x7, './file0'}]}}, 0x87) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'nicvf0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/wakeup_count', 0xc00, 0x4) write$nci(r9, &(0x7f0000000480)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x0, 0x2, 0x5, 0x9, 0x1}, 0x4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r10, 0x200, 0x70bd25, 0x38bd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000680)=0x1, 0x4) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f00000006c0)=[0x1ff, 0x10, 0x2f5f, 0x2a, 0x3, 0x80000000, 0x1, 0x2]) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) r13 = openat2(r1, &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780)={0x201, 0x118, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xb, 0x1, 0x2, 0x189, 0x400, r9, 0x7ff, '\x00', r12, r13, 0x5, 0x2, 0x10001}, 0x50) recvmsg$can_bcm(r13, &(0x7f0000000f80)={&(0x7f0000000840)=@generic, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000008c0)=""/149, 0x95}, {&(0x7f0000000980)=""/212, 0xd4}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/214, 0xd6}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f0000000d00)=""/159, 0x9f}, {&(0x7f0000000dc0)=""/66, 0x42}, {&(0x7f0000000e40)=""/97, 0x61}], 0x8, &(0x7f0000000f40)=""/7, 0x7}, 0x10100) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 196.972142ms ago: executing program 4 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x3220, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0xff}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0xfffe, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='cachefiles_trunc\x00', r4}, 0x18) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x210012, &(0x7f0000000400)={[{@fat=@debug}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0xd}}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {}, {}, {@fat=@fmask={'fmask', 0x3d, 0x80000008}}, {@fat=@usefree}, {@fat=@discard}, {@fat=@check_strict}]}, 0x0, 0x1c5, &(0x7f00000008c0)="$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") 103.408165ms ago: executing program 1 (id=1005): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r0, 0x100000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="756e686964652c6869646500757466382c756e686964652c6d61703d6f66662c6d61703d6e6f726d616c4173657373696f6e3d3078303030303030303030303030303033372c756e68c7878093696f636861727365743d6d616363726f617469616e2c6f76657272000000006f632c6d61703d6e6f726d616c2c6e6f726f636b2c00345b90838707fcdb8fb096a189faf11a4c52483c00ab5bf3b872181e2a61ded6caa6f676e408ef4e52f7336c6611aa2081d4003acc5ac99819d52c953715b518efe92b5fc0c3d65b03288c9eadb88e40c327c108518a9b5746982bed0100ee76c870e9ec710bd02c0f98c2bd0d62418af9d926f345faa8a8b4afe7ee597900"/269], 0x2, 0x6b1, &(0x7f0000001100)="$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") r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) recvfrom$unix(r4, &(0x7f0000000180)=""/46, 0x2e, 0x10002, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f0000000000)=@tcp6=r4, 0x1}, 0x20) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r9}, 0x18) getpeername$netlink(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, 0x0) r11 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r11, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 90.024326ms ago: executing program 3 (id=1006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='cpu_frequency_limits\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000040)="248c80f1f43f52cb7c91465e6ca0010714e7e519dbe129b7dcbd61061972d86b0b241a1faf1e707da9d9264d", 0x2c) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'erspan0\x00', @remote}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = getuid() quotactl_fd$Q_SETINFO(r4, 0xffffffff80000602, r7, &(0x7f00000002c0)={0x8000000000000000, 0x1c0, 0x1}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565"], 0xd8}}, 0x0) 0s ago: executing program 4 (id=1007): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4) (async) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') (async) mmap$IORING_OFF_SQ_RING(&(0x7f000087e000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) r4 = getpid() (async) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000280), &(0x7f0000000780)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r5, 0x0, 0x2}, 0x18) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r7 = getgid() lchown(0x0, 0x0, r7) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (rerun: 64) kernel console output (not intermixed with test programs): 'syz.4.373': attribute type 11 has an invalid length. [ 56.796258][ T4987] 9pnet: Unknown protocol version 9p2000ÑVÇnXg*ñTõü¯DCü¹¤ýúäÄ=Qš;>‘_ýòëÕ7[ÕGñw@zþ÷6½þ×âNj×k·^ÇÕ?>o9§Ùîõ¿'y»n߇ÓKK—&#ö$¯W]»ª¡ÜÔzù4þ±cÍûÿÁX'ŽDDz?DÄ£YÛ‹ˆÇ#âX›øzù‰÷¶ÿ@›¿Úiü³[:ÿë‰=Ѹ§y¢xþÇïê*Þlü‘ÿ“•ÔX¶g3Ÿ›i×ö®f [ 56.800731][ T4995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.373'. [ 56.865815][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.989037][ T5009] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 57.156197][ T5023] 9pnet_fd: Insufficient options for proto=fd [ 57.275183][ T5029] loop2: detected capacity change from 0 to 2048 [ 57.334734][ T5029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.421414][ T5016] loop0: detected capacity change from 0 to 32768 [ 57.430468][ T5039] xt_hashlimit: max too large, truncated to 1048576 [ 57.444510][ T5039] 9p: Unknown access argument : -22 [ 57.493378][ T4011] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 57.506343][ T4011] loop0: p1 start 460800 is beyond EOD, truncated [ 57.512888][ T4011] loop0: p2 size 83886080 extends beyond EOD, truncated [ 57.525303][ T3320] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 57.550515][ T3320] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 57.558713][ T4011] loop0: p5 start 460800 is beyond EOD, truncated [ 57.565727][ T4011] loop0: p6 size 83886080 extends beyond EOD, truncated [ 57.586688][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.606373][ T5016] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 57.611786][ T5016] loop0: p1 start 460800 is beyond EOD, truncated [ 57.618261][ T5016] loop0: p2 size 83886080 extends beyond EOD, truncated [ 57.628320][ T5016] loop0: p5 start 460800 is beyond EOD, truncated [ 57.634814][ T5016] loop0: p6 size 83886080 extends beyond EOD, truncated [ 57.651689][ T5047] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 57.704715][ T5049] netlink: 'syz.2.390': attribute type 298 has an invalid length. [ 57.740997][ T3506] udevd[3506]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 57.754453][ T5051] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 57.764136][ T5051] SELinux: failed to load policy [ 57.823447][ T5055] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 57.833538][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 57.833553][ T29] audit: type=1400 audit(1764451879.061:2028): avc: denied { relabelto } for pid=5054 comm="syz.3.395" name="NETLINK" dev="sockfs" ino=10264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 57.844844][ T5055] netlink: 'syz.3.395': attribute type 30 has an invalid length. [ 57.910480][ T29] audit: type=1326 audit(1764451879.121:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 57.934123][ T29] audit: type=1326 audit(1764451879.121:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 57.957677][ T29] audit: type=1326 audit(1764451879.121:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 57.981218][ T29] audit: type=1326 audit(1764451879.121:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 58.004636][ T29] audit: type=1326 audit(1764451879.121:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 58.028282][ T29] audit: type=1326 audit(1764451879.121:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 58.052111][ T29] audit: type=1326 audit(1764451879.121:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 58.075623][ T29] audit: type=1326 audit(1764451879.121:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 58.099041][ T29] audit: type=1326 audit(1764451879.121:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5052 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 58.112862][ T5070] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 58.138846][ T5070] SELinux: failed to load policy [ 58.167740][ T5066] loop0: detected capacity change from 0 to 512 [ 58.180512][ T5066] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.392: error while reading EA inode 32 err=-116 [ 58.194114][ T5066] EXT4-fs (loop0): Remounting filesystem read-only [ 58.206639][ T5066] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.227723][ T5066] EXT4-fs (loop0): 1 orphan inode deleted [ 58.234141][ T5066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.262201][ T5066] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.343634][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 58.362919][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 58.448470][ T5093] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 58.556974][ T5106] 9pnet_fd: Insufficient options for proto=fd [ 58.563400][ T5104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.600210][ T5104] bond1 (unregistering): Released all slaves [ 58.628879][ T5109] loop0: detected capacity change from 0 to 256 [ 58.668916][ T5109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5109 comm=syz.0.409 [ 58.712268][ T5112] loop0: detected capacity change from 0 to 512 [ 58.719660][ T5112] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.808209][ T5112] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 58.817101][ T4071] IPVS: starting estimator thread 0... [ 58.822899][ T5112] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 58.904234][ T5120] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 58.915853][ T5118] loop0: detected capacity change from 0 to 512 [ 58.916402][ T5115] IPVS: using max 2352 ests per chain, 117600 per kthread [ 58.933350][ T5118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.957825][ T5120] loop3: detected capacity change from 0 to 512 [ 58.973234][ T5118] EXT4-fs (loop0): 1 truncate cleaned up [ 58.991475][ T5118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.032907][ T5120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.101865][ T5120] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.148861][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.187166][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.607915][ T5144] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 59.769867][ T5150] sctp: [Deprecated]: syz.0.419 (pid 5150) Use of int in max_burst socket option. [ 59.769867][ T5150] Use struct sctp_assoc_value instead [ 59.808171][ T5074] syz.1.398 (5074) used greatest stack depth: 7480 bytes left [ 59.987297][ T5157] loop2: detected capacity change from 0 to 512 [ 60.156468][ T5157] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.422: corrupted xattr block 95: invalid header [ 60.171414][ T5160] loop0: detected capacity change from 0 to 1024 [ 60.237228][ T5157] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.422: bg 0: block 7: invalid block bitmap [ 60.262563][ T5160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.308227][ T5157] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 60.327582][ T5160] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.350237][ T5157] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.422: corrupted xattr block 95: invalid header [ 60.394629][ T5160] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.423: bg 0: block 112: padding at end of block bitmap is not set [ 60.419397][ T5157] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 60.446719][ T5157] EXT4-fs (loop2): 1 orphan inode deleted [ 60.452936][ T5160] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 60.465332][ T5160] EXT4-fs (loop0): This should not happen!! Data will be lost [ 60.465332][ T5160] [ 60.496063][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.570456][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.780596][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.934919][ T5189] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 61.211253][ T5196] __nla_validate_parse: 3 callbacks suppressed [ 61.211267][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.433'. [ 61.264882][ T5199] netlink: 'syz.0.432': attribute type 21 has an invalid length. [ 61.276028][ T5199] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 61.283895][ T5199] netlink: 144 bytes leftover after parsing attributes in process `syz.0.432'. [ 61.330212][ T5203] loop3: detected capacity change from 0 to 1024 [ 61.357217][ T5203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.378008][ T5203] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.417788][ T5203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.434: bg 0: block 112: padding at end of block bitmap is not set [ 61.457769][ T5208] loop0: detected capacity change from 0 to 8192 [ 61.464370][ T5203] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 61.476795][ T5203] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.476795][ T5203] [ 61.519529][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.529954][ T5208] loop0: p1 p2 p3 p4[EZD] [ 61.549254][ T5208] loop0: p1 start 134154240 is beyond EOD, truncated [ 61.578788][ T5208] loop0: p3 start 360447 is beyond EOD, truncated [ 61.585292][ T5208] loop0: p4 size 264072 extends beyond EOD, truncated [ 61.794748][ T5229] bridge0: port 3(macsec1) entered blocking state [ 61.801396][ T5229] bridge0: port 3(macsec1) entered disabled state [ 61.808238][ T5229] macsec1: entered allmulticast mode [ 61.824785][ T5229] macsec1: left allmulticast mode [ 61.845645][ T5233] loop2: detected capacity change from 0 to 512 [ 61.901991][ T5240] loop3: detected capacity change from 0 to 512 [ 61.911291][ T5233] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.444: bad orphan inode 11862016 [ 61.944238][ T5240] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.445: error while reading EA inode 32 err=-116 [ 61.968638][ T5233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 61.993701][ T5240] EXT4-fs (loop3): Remounting filesystem read-only [ 62.007360][ T5233] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.017980][ T5240] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 62.040550][ T5240] EXT4-fs (loop3): 1 orphan inode deleted [ 62.053627][ T5233] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 62.067138][ T5240] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.088432][ T5233] SELinux: failed to load policy [ 62.098001][ T5240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.154228][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 62.167546][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 62.190782][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 62.227973][ T5235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 62.273320][ T5258] bridge_slave_0: left allmulticast mode [ 62.279145][ T5258] bridge_slave_0: left promiscuous mode [ 62.284954][ T5258] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.315457][ T5259] netlink: 'syz.0.450': attribute type 10 has an invalid length. [ 62.323374][ T5259] netlink: 2 bytes leftover after parsing attributes in process `syz.0.450'. [ 62.349156][ T5264] delete_channel: no stack [ 62.350687][ T5258] bridge_slave_1: left allmulticast mode [ 62.353918][ T5264] delete_channel: no stack [ 62.359570][ T5258] bridge_slave_1: left promiscuous mode [ 62.359796][ T5258] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.379845][ T5258] .`: (slave bond_slave_0): Releasing backup interface [ 62.389764][ T5258] .`: (slave bond_slave_1): Releasing backup interface [ 62.408377][ T5269] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 62.413080][ T5268] loop4: detected capacity change from 0 to 2048 [ 62.423327][ T5269] SELinux: failed to load policy [ 62.440200][ T5258] team0: Port device team_slave_0 removed [ 62.449822][ T5258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.453189][ T5268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.457278][ T5258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.476839][ T5268] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.478263][ T5258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.488810][ T5267] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.453: bg 0: block 345: padding at end of block bitmap is not set [ 62.494891][ T5258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.519004][ T5258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.536475][ T5259] team0: entered promiscuous mode [ 62.545991][ T5259] bridge0: port 1(team0) entered blocking state [ 62.552364][ T5259] bridge0: port 1(team0) entered disabled state [ 62.558942][ T5267] EXT4-fs (loop4): Remounting filesystem read-only [ 62.577903][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.607183][ T5259] team0: entered allmulticast mode [ 62.645240][ T5259] bridge0: port 1(team0) entered blocking state [ 62.651784][ T5259] bridge0: port 1(team0) entered forwarding state [ 62.660851][ T4665] bridge0: port 1(team0) entered disabled state [ 62.740301][ T5278] can0: slcan on ttyS3. [ 62.786534][ T5277] can0 (unregistered): slcan off ttyS3. [ 62.885297][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 62.885311][ T29] audit: type=1400 audit(1764451884.111:2224): avc: denied { firmware_load } for pid=5287 comm="syz.4.458" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 63.266782][ T5303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.275418][ T5303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.286159][ T5304] netlink: 64 bytes leftover after parsing attributes in process `syz.2.461'. [ 63.318226][ T5303] tipc: Started in network mode [ 63.323241][ T5303] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 63.333089][ T5301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5301 comm=syz.2.461 [ 63.342514][ T5298] loop4: detected capacity change from 0 to 8192 [ 63.355857][ T29] audit: type=1400 audit(1764451884.571:2225): avc: denied { write } for pid=5300 comm="syz.2.461" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.379251][ T29] audit: type=1400 audit(1764451884.571:2226): avc: denied { open } for pid=5300 comm="syz.2.461" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.402918][ T29] audit: type=1400 audit(1764451884.571:2227): avc: denied { ioctl } for pid=5300 comm="syz.2.461" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 63.420835][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 63.440911][ T5303] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 63.449257][ T5303] tipc: Enabled bearer , priority 10 [ 63.482087][ T5298] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.504239][ T5306] bridge0: port 1(team0) entered disabled state [ 63.519679][ T29] audit: type=1400 audit(1764451884.641:2228): avc: denied { mounton } for pid=5302 comm="syz.0.462" path="mnt:[4026532379]" dev="nsfs" ino=4026532379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.557009][ T5306] team0 (unregistering): left allmulticast mode [ 63.563397][ T5306] bridge0: port 1(team0) entered disabled state [ 63.584647][ T29] audit: type=1326 audit(1764451884.811:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234c8f749 code=0x7ffc0000 [ 63.654899][ T29] audit: type=1326 audit(1764451884.811:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234c8f749 code=0x7ffc0000 [ 63.678340][ T29] audit: type=1326 audit(1764451884.811:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe234c8f749 code=0x7ffc0000 [ 63.701722][ T29] audit: type=1326 audit(1764451884.811:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234c8f749 code=0x7ffc0000 [ 63.725403][ T29] audit: type=1326 audit(1764451884.811:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.2.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe234c8f749 code=0x7ffc0000 [ 63.838370][ T5312] xt_hashlimit: max too large, truncated to 1048576 [ 63.924928][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 63.946296][ T5338] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 63.969221][ T5338] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.981773][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 64.013501][ T5338] bond1 (unregistering): Released all slaves [ 64.307336][ T5362] loop3: detected capacity change from 0 to 512 [ 64.323498][ T5362] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.332691][ T5362] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 64.381751][ T5362] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 64.392048][ T5371] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.397342][ T5362] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 64.408197][ T5362] System zones: 0-2, 18-18, 34-35 [ 64.416977][ T5362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.432680][ T5368] loop0: detected capacity change from 0 to 256 [ 64.466508][ T4046] tipc: Node number set to 1 [ 64.486000][ T5362] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 64.503626][ T5368] syz.0.483: attempt to access beyond end of device [ 64.503626][ T5368] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 64.545586][ T5376] loop4: detected capacity change from 0 to 512 [ 64.554968][ T5376] EXT4-fs: Ignoring removed orlov option [ 64.560758][ T5376] EXT4-fs: Ignoring removed i_version option [ 64.567768][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.591082][ T5376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.631543][ T5376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.653685][ T5376] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.766826][ T5397] loop0: detected capacity change from 0 to 512 [ 64.806083][ T5397] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.489: error while reading EA inode 32 err=-116 [ 64.860685][ T5397] EXT4-fs (loop0): Remounting filesystem read-only [ 64.911716][ T5397] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 64.927252][ T5397] EXT4-fs (loop0): 1 orphan inode deleted [ 64.933612][ T5397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.139513][ T5417] wg2: entered promiscuous mode [ 65.144564][ T5417] wg2: entered allmulticast mode [ 65.341214][ T5420] loop0: detected capacity change from 0 to 8192 [ 65.365740][ T5430] loop3: detected capacity change from 0 to 512 [ 65.382212][ T5416] syz.0.495: attempt to access beyond end of device [ 65.382212][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.388705][ T5430] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.395585][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.434133][ T5416] syz.0.495: attempt to access beyond end of device [ 65.434133][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.447642][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.459707][ T5420] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 65.467702][ T5420] FAT-fs (loop0): Filesystem has been set read-only [ 65.487048][ T5416] syz.0.495: attempt to access beyond end of device [ 65.487048][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.488555][ T4070] IPVS: starting estimator thread 0... [ 65.500429][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.516117][ T5430] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 65.525040][ T5420] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 65.525226][ T5430] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 65.547107][ T5416] syz.0.495: attempt to access beyond end of device [ 65.547107][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.560546][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.596365][ T5431] IPVS: using max 2256 ests per chain, 112800 per kthread [ 65.605735][ T5416] syz.0.495: attempt to access beyond end of device [ 65.605735][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.619311][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.628583][ T5416] syz.0.495: attempt to access beyond end of device [ 65.628583][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.642003][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.662384][ T5416] syz.0.495: attempt to access beyond end of device [ 65.662384][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.675842][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.685659][ T5416] syz.0.495: attempt to access beyond end of device [ 65.685659][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.699061][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.716649][ T5416] syz.0.495: attempt to access beyond end of device [ 65.716649][ T5416] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 65.730127][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.797791][ T5416] Buffer I/O error on dev loop0, logical block 57847, async page read [ 65.808029][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.817334][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.500285][ T5457] __nla_validate_parse: 6 callbacks suppressed [ 66.500303][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 66.557359][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 66.588708][ T5463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5463 comm=syz.3.507 [ 66.604613][ T5463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5463 comm=syz.3.507 [ 66.625911][ T5463] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=5463 comm=syz.3.507 [ 66.650986][ T5463] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 66.659111][ T5466] loop2: detected capacity change from 0 to 1024 [ 66.665892][ T5466] EXT4-fs: inline encryption not supported [ 66.671165][ T5463] bond1: entered promiscuous mode [ 66.676883][ T5463] bond1: entered allmulticast mode [ 66.696613][ T5463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.716889][ T5469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 66.864379][ T5478] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.906821][ T5466] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.508: Allocating blocks 385-513 which overlap fs metadata [ 67.052082][ T5466] EXT4-fs (loop2): pa ffff88810712e620: logic 16, phys. 129, len 24 [ 67.060307][ T5466] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 67.987797][ T5466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 68.000436][ T5466] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.000436][ T5466] [ 68.010155][ T5466] EXT4-fs (loop2): Total free blocks count 0 [ 68.016313][ T5466] EXT4-fs (loop2): Free/Dirty block details [ 68.022275][ T5466] EXT4-fs (loop2): free_blocks=128 [ 68.027518][ T5466] EXT4-fs (loop2): dirty_blocks=0 [ 68.032615][ T5466] EXT4-fs (loop2): Block reservation details [ 68.038731][ T5466] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 69.165779][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 69.174787][ T5494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 70.067103][ T5502] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 70.087183][ T29] kauditd_printk_skb: 3038 callbacks suppressed [ 70.087196][ T29] audit: type=1400 audit(1764451891.321:5272): avc: denied { ioctl } for pid=5503 comm="syz.2.517" path="socket:[11340]" dev="sockfs" ino=11340 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.130588][ T5509] sctp: [Deprecated]: syz.2.517 (pid 5509) Use of int in max_burst socket option. [ 70.130588][ T5509] Use struct sctp_assoc_value instead [ 70.139260][ T5502] SELinux: failed to load policy [ 70.163763][ T5512] 9pnet_fd: Insufficient options for proto=fd [ 70.204002][ T5505] sctp: [Deprecated]: syz.2.517 (pid 5505) Use of int in max_burst socket option. [ 70.204002][ T5505] Use struct sctp_assoc_value instead [ 70.227200][ T5515] loop2: detected capacity change from 0 to 128 [ 70.275728][ T5522] loop0: detected capacity change from 0 to 128 [ 70.459197][ T5537] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.527'. [ 70.505539][ T5537] loop3: detected capacity change from 0 to 512 [ 70.557392][ T5537] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 70.576442][ T5537] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.678743][ T5537] EXT4-fs (loop3): mount failed [ 70.763148][ T5554] netlink: 'syz.4.532': attribute type 5 has an invalid length. [ 71.056159][ T5576] SELinux: policydb version 603770947 does not match my version range 15-35 [ 71.083539][ T5576] SELinux: failed to load policy [ 71.117340][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'. [ 71.160242][ T5580] loop3: detected capacity change from 0 to 512 [ 71.189240][ T5582] loop0: detected capacity change from 0 to 512 [ 71.285014][ T5590] loop0: detected capacity change from 0 to 512 [ 71.304167][ T5576] loop4: detected capacity change from 0 to 512 [ 71.334996][ T5590] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.366466][ T5576] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.377076][ T5576] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 71.412243][ T5590] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 71.421523][ T5590] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 71.434057][ T5576] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 71.446662][ T5576] EXT4-fs (loop4): failed to initialize system zone (-117) [ 71.465181][ T5576] EXT4-fs (loop4): mount failed [ 71.477514][ T5593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.542'. [ 71.547236][ T5593] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 71.565672][ T5593] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 71.593084][ T5576] SELinux: policydb magic number 0x5f737973 does not match expected magic number 0xf97cff8c [ 71.627390][ T5576] SELinux: failed to load policy [ 71.707295][ T29] audit: type=1326 audit(1764451892.941:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 71.745128][ T5611] lo speed is unknown, defaulting to 1000 [ 71.751248][ T5611] lo speed is unknown, defaulting to 1000 [ 71.778683][ T5611] lo speed is unknown, defaulting to 1000 [ 71.794813][ T5611] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.839072][ T5611] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.909388][ T5611] lo speed is unknown, defaulting to 1000 [ 71.915757][ T5611] lo speed is unknown, defaulting to 1000 [ 71.945325][ T29] audit: type=1326 audit(1764451892.941:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 71.964967][ T5611] lo speed is unknown, defaulting to 1000 [ 71.968864][ T29] audit: type=1326 audit(1764451892.981:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 71.997885][ T29] audit: type=1326 audit(1764451892.981:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 72.021682][ T29] audit: type=1326 audit(1764451893.071:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 72.023166][ T5630] loop0: detected capacity change from 0 to 128 [ 72.045077][ T29] audit: type=1326 audit(1764451893.071:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 72.052048][ T5611] lo speed is unknown, defaulting to 1000 [ 72.074963][ T29] audit: type=1326 audit(1764451893.071:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 72.104413][ T29] audit: type=1326 audit(1764451893.071:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5608 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 72.141997][ T5611] lo speed is unknown, defaulting to 1000 [ 72.181369][ T5630] EXT4-fs: Ignoring removed nobh option [ 72.193839][ T5628] ip6gre2: entered allmulticast mode [ 72.236045][ T5630] EXT4-fs mount: 4 callbacks suppressed [ 72.236064][ T5630] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.254731][ T5630] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.304635][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.315904][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 72.327268][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 72.336179][ T5644] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 72.383511][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 72.392678][ T5649] hsr_slave_0: left promiscuous mode [ 72.398963][ T5649] hsr_slave_1: left promiscuous mode [ 72.426940][ T5651] loop3: detected capacity change from 0 to 512 [ 72.505371][ T5659] loop4: detected capacity change from 0 to 512 [ 72.536808][ T5659] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.558: error while reading EA inode 32 err=-116 [ 72.585659][ T5659] EXT4-fs (loop4): Remounting filesystem read-only [ 72.630470][ T5659] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 72.701149][ T5659] EXT4-fs (loop4): 1 orphan inode deleted [ 72.786871][ T5659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.825792][ T5659] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.952862][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 72.992370][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 73.157187][ T5696] Process accounting resumed [ 73.309800][ T5709] netlink: 36 bytes leftover after parsing attributes in process `syz.4.562'. [ 73.583175][ T5746] netlink: 124 bytes leftover after parsing attributes in process `syz.0.566'. [ 74.007673][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 74.096892][ T5791] loop4: detected capacity change from 0 to 512 [ 74.330137][ T5791] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.573: error while reading EA inode 32 err=-116 [ 74.343404][ T5791] EXT4-fs (loop4): Remounting filesystem read-only [ 74.350111][ T5791] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 74.360332][ T5791] EXT4-fs (loop4): 1 orphan inode deleted [ 74.368836][ T5791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.385674][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.865723][ T5799] lo speed is unknown, defaulting to 1000 [ 74.997882][ T5820] loop4: detected capacity change from 0 to 2048 [ 75.028903][ T5820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.060238][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 75.077201][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 75.504561][ T5871] lo speed is unknown, defaulting to 1000 [ 75.567902][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 75.567980][ T29] audit: type=1400 audit(1764451896.801:5565): avc: denied { listen } for pid=5878 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.631132][ T29] audit: type=1400 audit(1764451896.831:5566): avc: denied { accept } for pid=5878 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.723682][ T29] audit: type=1326 audit(1764451896.951:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 75.747521][ T29] audit: type=1326 audit(1764451896.951:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 75.791164][ T29] audit: type=1326 audit(1764451896.951:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 75.814764][ T29] audit: type=1326 audit(1764451896.961:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 75.838192][ T29] audit: type=1326 audit(1764451896.961:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 75.865450][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.880375][ T29] audit: type=1400 audit(1764451897.021:5572): avc: denied { bind } for pid=5884 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.899789][ T29] audit: type=1326 audit(1764451897.091:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 75.923388][ T29] audit: type=1326 audit(1764451897.091:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 76.079407][ T5909] netlink: 'syz.2.586': attribute type 12 has an invalid length. [ 76.163564][ T5906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.177342][ T5917] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 76.621413][ T5951] rdma_rxe: rxe_newlink: failed to add lo [ 76.628278][ T5951] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 76.642048][ T5951] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 76.663072][ T5954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5954 comm=syz.0.594 [ 76.746456][ T5954] lo speed is unknown, defaulting to 1000 [ 77.446645][ T5983] 9pnet_fd: Insufficient options for proto=fd [ 77.680718][ T6029] __nla_validate_parse: 2 callbacks suppressed [ 77.680737][ T6029] netlink: 256 bytes leftover after parsing attributes in process `syz.0.600'. [ 77.762117][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 78.435562][ T6028] netlink: 48 bytes leftover after parsing attributes in process `syz.3.601'. [ 78.453480][ T6081] loop0: detected capacity change from 0 to 512 [ 78.472726][ T6081] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.606: error while reading EA inode 32 err=-116 [ 78.492139][ T6081] EXT4-fs (loop0): Remounting filesystem read-only [ 78.502129][ T6081] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 78.512597][ T6081] EXT4-fs (loop0): 1 orphan inode deleted [ 78.518855][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.536659][ T6081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.641667][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 78.677644][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 78.845136][ T6130] loop0: detected capacity change from 0 to 512 [ 78.863933][ T6130] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.609: error while reading EA inode 32 err=-116 [ 78.946388][ T6130] EXT4-fs (loop0): Remounting filesystem read-only [ 78.995054][ T6130] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.043546][ T6130] EXT4-fs (loop0): 1 orphan inode deleted [ 79.098212][ T6130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.173692][ T6130] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.227575][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 79.238431][ T6141] netlink: 76 bytes leftover after parsing attributes in process `syz.2.614'. [ 79.276387][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 79.383232][ T6149] loop3: detected capacity change from 0 to 512 [ 79.423813][ T6148] loop0: detected capacity change from 0 to 512 [ 79.434148][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 79.443816][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 79.470506][ T6148] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.617: error while reading EA inode 32 err=-116 [ 79.507725][ T6148] EXT4-fs (loop0): Remounting filesystem read-only [ 79.514503][ T6148] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.542776][ T6149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.565677][ T6148] EXT4-fs (loop0): 1 orphan inode deleted [ 79.585987][ T6148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.598611][ T6163] loop4: detected capacity change from 0 to 4096 [ 79.607033][ T6149] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.640509][ T6148] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.683996][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.900929][ T6189] loop0: detected capacity change from 0 to 512 [ 79.907661][ T6189] msdos: Unknown parameter 'quiÛeÖ‘4G½' [ 80.218542][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.259711][ T6195] loop2: detected capacity change from 0 to 1024 [ 80.316951][ T6195] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.327927][ T6195] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.363934][ T6195] JBD2: no valid journal superblock found [ 80.369792][ T6195] EXT4-fs (loop2): Could not load journal inode [ 80.589742][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 80.589776][ T29] audit: type=1404 audit(1764451901.761:5869): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 80.611115][ T29] audit: type=1404 audit(1764451901.771:5870): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 80.626113][ T29] audit: type=1400 audit(1764451901.771:5871): avc: denied { map_create } for pid=6197 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.645224][ T29] audit: type=1400 audit(1764451901.771:5872): avc: denied { prog_load } for pid=6197 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.664298][ T29] audit: type=1400 audit(1764451901.771:5873): avc: denied { bpf } for pid=6197 comm="syz.0.633" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.684793][ T29] audit: type=1400 audit(1764451901.771:5874): avc: denied { perfmon } for pid=6197 comm="syz.0.633" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.705916][ T29] audit: type=1400 audit(1764451901.771:5875): avc: denied { map_read map_write } for pid=6197 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.725890][ T29] audit: type=1400 audit(1764451901.771:5876): avc: denied { create } for pid=6197 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.745449][ T29] audit: type=1400 audit(1764451901.771:5877): avc: denied { write } for pid=6197 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.764890][ T29] audit: type=1400 audit(1764451901.771:5878): avc: denied { open } for pid=6197 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.805878][ T6202] loop0: detected capacity change from 0 to 1764 [ 81.031929][ T6209] loop0: detected capacity change from 0 to 512 [ 81.041717][ T6210] loop4: detected capacity change from 0 to 512 [ 81.052665][ T6210] EXT4-fs: Ignoring removed bh option [ 81.072603][ T6210] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 81.088736][ T6210] EXT4-fs (loop4): 1 truncate cleaned up [ 81.095076][ T6210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.124835][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.154893][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.170369][ T6207] tipc: New replicast peer: 255.255.255.255 [ 81.176556][ T6207] tipc: Enabled bearer , priority 10 [ 81.183285][ T6207] tipc: Disabling bearer [ 81.202870][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.253864][ T6216] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 81.265491][ T6216] bond2 (unregistering): Released all slaves [ 81.373004][ T6221] pim6reg1: entered promiscuous mode [ 81.378414][ T6221] pim6reg1: entered allmulticast mode [ 81.474526][ T6224] cgroup2: Unknown parameter 'favordynmod' [ 81.879492][ T6248] loop0: detected capacity change from 0 to 512 [ 81.909498][ T6248] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.946736][ T6251] xt_hashlimit: max too large, truncated to 1048576 [ 81.968272][ T6248] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 81.981222][ T6248] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 82.052773][ T6255] loop2: detected capacity change from 0 to 2048 [ 82.111798][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.162440][ T6259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.172214][ T6259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.314618][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.545340][ T6261] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1544 sclass=netlink_audit_socket pid=6261 comm=+}[@ [ 83.662744][ T6271] __nla_validate_parse: 8 callbacks suppressed [ 83.662761][ T6271] netlink: 96 bytes leftover after parsing attributes in process `syz.2.654'. [ 83.753824][ T6274] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 83.769497][ T6274] SELinux: failed to load policy [ 83.927689][ T6278] sctp: [Deprecated]: syz.3.657 (pid 6278) Use of int in max_burst socket option deprecated. [ 83.927689][ T6278] Use struct sctp_assoc_value instead [ 84.116995][ T6287] loop3: detected capacity change from 0 to 512 [ 84.296139][ T6287] EXT4-fs (loop3): 1 orphan inode deleted [ 84.311871][ T6287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.389374][ T6287] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.434767][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.585612][ T6312] veth0: entered promiscuous mode [ 84.607278][ T6312] veth0: left promiscuous mode [ 84.624772][ T6312] openvswitch: netlink: Missing key (keys=40, expected=80) [ 84.985245][ T6330] netlink: 7 bytes leftover after parsing attributes in process `syz.2.674'. [ 85.004275][ T6330] netlink: 116 bytes leftover after parsing attributes in process `syz.2.674'. [ 85.109252][ T6335] pim6reg: entered allmulticast mode [ 85.161944][ T6335] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 85.172546][ T6335] SELinux: failed to load policy [ 85.214903][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.677'. [ 85.246173][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.677'. [ 85.431297][ T6357] pimreg: tun_chr_ioctl cmd 1074025677 [ 85.442572][ T6357] pimreg: linktype set to 260 [ 85.459531][ T6359] loop3: detected capacity change from 0 to 512 [ 85.497735][ T6359] EXT4-fs: Ignoring removed bh option [ 85.553736][ T6359] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 85.607505][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 85.607522][ T29] audit: type=1400 audit(1764451906.841:6227): avc: denied { mounton } for pid=6362 comm="syz.0.681" path="/proc/479/task/480/net" dev="proc" ino=13439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 85.666395][ T29] audit: type=1400 audit(1764451906.841:6228): avc: denied { mount } for pid=6362 comm="syz.0.681" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.708821][ T6370] netlink: 'syz.3.684': attribute type 32 has an invalid length. [ 85.716422][ T6373] tipc: Started in network mode [ 85.716695][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 85.721657][ T6373] tipc: Node identity 16e05ec44ecf, cluster identity 4711 [ 85.737527][ T6373] tipc: Enabled bearer , priority 0 [ 85.766545][ T6370] bond2: Setting coupled_control to on (1) [ 85.789548][ T6373] tipc: Disabling bearer [ 85.844338][ T29] audit: type=1400 audit(1764451907.071:6229): avc: denied { ioctl } for pid=6378 comm="syz.3.685" path="socket:[13459]" dev="sockfs" ino=13459 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.892332][ T6379] loop3: detected capacity change from 0 to 512 [ 85.909697][ T6379] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.685: error while reading EA inode 32 err=-116 [ 85.935890][ T6386] loop2: detected capacity change from 0 to 256 [ 85.947642][ T29] audit: type=1400 audit(1764451907.101:6230): avc: denied { sys_module } for pid=6378 comm="syz.3.685" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 85.976695][ T6379] EXT4-fs (loop3): Remounting filesystem read-only [ 85.983643][ T6386] msdos: Unknown parameter '0xffffffffffffffffŠæ%»VÕ}æ¬>·<' [ 85.997164][ T6379] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 86.042603][ T6379] EXT4-fs (loop3): 1 orphan inode deleted [ 86.056558][ T6379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.058237][ T29] audit: type=1400 audit(1764451907.291:6231): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 86.089491][ T6379] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.115339][ T6389] loop4: detected capacity change from 0 to 128 [ 86.123320][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 86.134716][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 86.144222][ T29] audit: type=1326 audit(1764451907.351:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 86.167817][ T29] audit: type=1326 audit(1764451907.351:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 86.191246][ T29] audit: type=1326 audit(1764451907.351:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 86.214813][ T29] audit: type=1326 audit(1764451907.351:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 86.238462][ T29] audit: type=1326 audit(1764451907.351:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5adf749 code=0x7ffc0000 [ 86.272567][ T6381] lo speed is unknown, defaulting to 1000 [ 86.456315][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.700049][ T6414] loop3: detected capacity change from 0 to 512 [ 86.951645][ T6414] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.694: bad orphan inode 13 [ 86.962451][ T6414] ext4_test_bit(bit=12, block=4) = 1 [ 86.967834][ T6414] is_bad_inode(inode)=0 [ 86.971990][ T6414] NEXT_ORPHAN(inode)=0 [ 86.976738][ T6414] max_ino=32 [ 86.979945][ T6414] i_nlink=1 [ 86.992120][ T6414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.005677][ T6414] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.694: Unrecognised inode hash code 20 [ 87.017088][ T6414] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.694: Corrupt directory, running e2fsck is recommended [ 87.030429][ T6414] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.694: Unrecognised inode hash code 20 [ 87.041822][ T6414] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.694: Corrupt directory, running e2fsck is recommended [ 87.148370][ T6432] netlink: 'syz.2.698': attribute type 298 has an invalid length. [ 87.156439][ T6431] netlink: 'syz.2.698': attribute type 298 has an invalid length. [ 87.252748][ T6444] batadv_slave_1: entered promiscuous mode [ 87.269809][ T6444] vlan0: entered allmulticast mode [ 87.272974][ T6446] program syz.4.703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.358069][ T6457] loop4: detected capacity change from 0 to 2048 [ 87.378703][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.424915][ T6444] batadv_slave_1: left promiscuous mode [ 87.473003][ T6470] loop4: detected capacity change from 0 to 128 [ 87.538389][ T6467] lo speed is unknown, defaulting to 1000 [ 87.643028][ T6471] infiniband syz0: set active [ 87.647920][ T6471] infiniband syz0: added bond_slave_0 [ 87.654404][ T6490] 9pnet_fd: Insufficient options for proto=fd [ 87.674201][ T6471] RDS/IB: syz0: added [ 87.801544][ T6471] smc: adding ib device syz0 with port count 1 [ 87.821742][ T6471] smc: ib device syz0 port 1 has no pnetid [ 87.970163][ T6499] lo speed is unknown, defaulting to 1000 [ 88.146749][ T6496] ALSA: seq fatal error: cannot create timer (-19) [ 88.333671][ T6502] tipc: Cannot configure node identity twice [ 88.368241][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 88.426703][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 88.557902][ T6514] FAULT_INJECTION: forcing a failure. [ 88.557902][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 88.570651][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.1.721 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.570769][ T6514] Tainted: [W]=WARN [ 88.570778][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.570793][ T6514] Call Trace: [ 88.570800][ T6514] [ 88.570810][ T6514] __dump_stack+0x1d/0x30 [ 88.570838][ T6514] dump_stack_lvl+0xe8/0x140 [ 88.570913][ T6514] dump_stack+0x15/0x1b [ 88.570929][ T6514] should_fail_ex+0x265/0x280 [ 88.570951][ T6514] ? sctp_association_new+0x71/0x1200 [ 88.570984][ T6514] should_failslab+0x8c/0xb0 [ 88.571046][ T6514] __kmalloc_cache_noprof+0x4c/0x4a0 [ 88.571085][ T6514] sctp_association_new+0x71/0x1200 [ 88.571111][ T6514] ? __ipv6_addr_type+0xe2/0x210 [ 88.571216][ T6514] sctp_connect_new_asoc+0x1a8/0x3a0 [ 88.571253][ T6514] sctp_sendmsg+0xf10/0x18d0 [ 88.571340][ T6514] ? selinux_socket_sendmsg+0x111/0x1b0 [ 88.571375][ T6514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.571413][ T6514] inet_sendmsg+0xc5/0xd0 [ 88.571442][ T6514] __sock_sendmsg+0x102/0x180 [ 88.571495][ T6514] __sys_sendto+0x268/0x330 [ 88.571597][ T6514] __x64_sys_sendto+0x76/0x90 [ 88.571630][ T6514] x64_sys_call+0x2d14/0x3000 [ 88.571736][ T6514] do_syscall_64+0xd2/0x200 [ 88.571767][ T6514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.571803][ T6514] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.571887][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.571945][ T6514] RIP: 0033:0x7f9052b9f749 [ 88.571960][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.571979][ T6514] RSP: 002b:00007f90515ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.572097][ T6514] RAX: ffffffffffffffda RBX: 00007f9052df5fa0 RCX: 00007f9052b9f749 [ 88.572113][ T6514] RDX: 000000000000ffe0 RSI: 0000200000000000 RDI: 0000000000000005 [ 88.572129][ T6514] RBP: 00007f90515ff090 R08: 0000200000000100 R09: 000000000000001c [ 88.572145][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.572164][ T6514] R13: 00007f9052df6038 R14: 00007f9052df5fa0 R15: 00007fffa6eadb78 [ 88.572261][ T6514] [ 88.616484][ T6498] loop9: detected capacity change from 0 to 7 [ 88.810315][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.819560][ C1] buffer_io_error: 3084 callbacks suppressed [ 88.819574][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.844246][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.853467][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.861542][ T4011] loop9: unable to read partition table [ 88.868875][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.878092][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.886460][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.895613][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.904593][ T6498] loop9: unable to read partition table [ 88.906261][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.919452][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.929257][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.938462][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.938954][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.954513][ T6498] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 88.955838][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.972081][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.981293][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.989501][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.998729][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 89.103342][ T6536] 9pnet_fd: Insufficient options for proto=fd [ 89.171814][ T6538] wg2: entered promiscuous mode [ 89.176806][ T6538] wg2: entered allmulticast mode [ 89.208792][ T6540] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 89.247312][ T6540] bond0: entered promiscuous mode [ 89.252435][ T6540] bond0: entered allmulticast mode [ 89.259137][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'. [ 89.274898][ T6540] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 89.286029][ T6540] bond0: (slave bridge2): making interface the new active one [ 89.293599][ T6540] bridge2: entered promiscuous mode [ 89.298958][ T6540] bridge2: entered allmulticast mode [ 89.305324][ T6540] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 89.316606][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 89.326167][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'. [ 89.351762][ T6546] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 89.414271][ T6552] loop2: detected capacity change from 0 to 256 [ 89.489475][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.510128][ T6552] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 89.525721][ T6519] lo speed is unknown, defaulting to 1000 [ 89.655540][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 89.706848][ T6562] tipc: Started in network mode [ 89.711802][ T6562] tipc: Node identity fa65aec89d6f, cluster identity 4711 [ 89.719064][ T6562] tipc: Enabled bearer , priority 0 [ 89.749375][ T6563] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 89.778127][ T6562] tipc: Disabling bearer [ 89.784316][ T6563] SELinux: failed to load policy [ 89.813735][ T6552] lo speed is unknown, defaulting to 1000 [ 89.850127][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 89.910636][ T6572] loop0: detected capacity change from 0 to 2048 [ 89.949289][ T4011] loop0: p1 < > p4 [ 89.968758][ T4011] loop0: p4 size 8388608 extends beyond EOD, truncated [ 90.017414][ T6580] lo speed is unknown, defaulting to 1000 [ 90.039640][ T6572] loop0: p1 < > p4 [ 90.045975][ T6572] loop0: p4 size 8388608 extends beyond EOD, truncated [ 90.331984][ T3320] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.339703][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 90.374476][ T3320] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.429323][ T6590] bond_slave_0: entered promiscuous mode [ 90.442477][ T6590] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 90.514587][ T6590] bond2: (slave macvlan0): Enslaving as a backup interface with an up link [ 90.840792][ T6604] loop0: detected capacity change from 0 to 1024 [ 90.877299][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.927681][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.996523][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 90.996541][ T29] audit: type=1400 audit(1764451912.221:6412): avc: denied { read } for pid=6608 comm="syz.4.746" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.050900][ T6610] loop4: detected capacity change from 0 to 512 [ 91.084066][ T6610] EXT4-fs (loop4): unable to read superblock [ 91.084980][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.121813][ T29] audit: type=1400 audit(1764451912.291:6413): avc: denied { create } for pid=6603 comm="syz.0.745" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.142147][ T29] audit: type=1400 audit(1764451912.291:6414): avc: denied { read write } for pid=6603 comm="syz.0.745" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.164819][ T29] audit: type=1400 audit(1764451912.291:6415): avc: denied { open } for pid=6603 comm="syz.0.745" path="/159/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.349319][ T6619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.750'. [ 91.368709][ T6621] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.396282][ T29] audit: type=1400 audit(1764451912.621:6416): avc: denied { mounton } for pid=6622 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 91.417982][ T29] audit: type=1326 audit(1764451912.621:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e91f749 code=0x7ffc0000 [ 91.418916][ T6621] erspan0: entered promiscuous mode [ 91.441371][ T29] audit: type=1326 audit(1764451912.621:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e91f749 code=0x7ffc0000 [ 91.469920][ T29] audit: type=1326 audit(1764451912.621:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f863e91f749 code=0x7ffc0000 [ 91.493363][ T29] audit: type=1326 audit(1764451912.621:6420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863e91f749 code=0x7ffc0000 [ 91.516723][ T29] audit: type=1326 audit(1764451912.621:6421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f863e91f749 code=0x7ffc0000 [ 91.688020][ T6622] lo speed is unknown, defaulting to 1000 [ 91.891657][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 92.021508][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.028793][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.039179][ T6622] bridge_slave_0: entered allmulticast mode [ 92.045884][ T6622] bridge_slave_0: entered promiscuous mode [ 92.052889][ T6639] lo speed is unknown, defaulting to 1000 [ 92.058903][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.066007][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.073334][ T6622] bridge_slave_1: entered allmulticast mode [ 92.079895][ T6622] bridge_slave_1: entered promiscuous mode [ 92.093389][ T6648] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 92.122365][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.172548][ T6648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.200678][ T6652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6652 comm=syz.0.755 [ 92.269781][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.285802][ T6650] bond1 (unregistering): Released all slaves [ 92.355460][ T6622] team0: Port device team_slave_0 added [ 92.362787][ T6622] team0: Port device team_slave_1 added [ 92.443072][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.443091][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.443131][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.498224][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.498239][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.498322][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.500844][ T6661] loop0: detected capacity change from 0 to 512 [ 92.505872][ T6661] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.759: error while reading EA inode 32 err=-116 [ 92.506146][ T6661] EXT4-fs (loop0): Remounting filesystem read-only [ 92.506177][ T6661] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 92.506230][ T6661] EXT4-fs (loop0): 1 orphan inode deleted [ 92.507417][ T6661] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.513999][ T6661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.520414][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 92.521463][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 92.579201][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 92.661280][ T6622] hsr_slave_0: entered promiscuous mode [ 92.667766][ T6622] hsr_slave_1: entered promiscuous mode [ 92.679618][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 92.721832][ T6674] loop3: detected capacity change from 0 to 512 [ 92.738552][ T6674] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.762: ea_inode file size=0 entry size=6 [ 92.753695][ T6674] EXT4-fs (loop3): 1 orphan inode deleted [ 92.760415][ T6674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.835176][ T6678] syzkaller0: entered promiscuous mode [ 92.840802][ T6678] syzkaller0: entered allmulticast mode [ 92.914764][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.946791][ T6679] tipc: Enabled bearer , priority 0 [ 92.964288][ T6691] loop4: detected capacity change from 0 to 1024 [ 92.973053][ T6678] tipc: Enabling of bearer rejected, already enabled [ 92.984608][ T6692] loop0: detected capacity change from 0 to 512 [ 92.997474][ T6692] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.765: error while reading EA inode 32 err=-116 [ 93.010618][ T6622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.025184][ T6692] EXT4-fs (loop0): Remounting filesystem read-only [ 93.026593][ T6691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.032008][ T6692] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 93.045123][ T6691] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.061655][ T6692] EXT4-fs (loop0): 1 orphan inode deleted [ 93.067094][ T6622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.077546][ T6692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.083012][ T6691] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.767: lblock 3 mapped to illegal pblock 3 (length 3) [ 93.090488][ T6692] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.107466][ T6691] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 93.116501][ T6694] bridge2: entered promiscuous mode [ 93.125020][ T6691] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.125020][ T6691] [ 93.130117][ T6694] bridge2: entered allmulticast mode [ 93.147378][ T6694] team0: Port device bridge2 added [ 93.154097][ T6622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.165064][ T6701] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.767: Freeing blocks not in datazone - block = 3, count = 3 [ 93.167457][ T6622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.194045][ T6679] tipc: Resetting bearer [ 93.201460][ T6701] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.767: Freeing blocks not in datazone - block = 0, count = 16 [ 93.236400][ T6677] tipc: Resetting bearer [ 93.239241][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 93.253870][ T6677] tipc: Disabling bearer [ 93.264081][ T4674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 112: padding at end of block bitmap is not set [ 93.279100][ T4674] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 93.291610][ T4674] EXT4-fs (loop4): This should not happen!! Data will be lost [ 93.291610][ T4674] [ 93.301318][ T4674] EXT4-fs (loop4): Total free blocks count 0 [ 93.307452][ T4674] EXT4-fs (loop4): Free/Dirty block details [ 93.313663][ T4674] EXT4-fs (loop4): free_blocks=0 [ 93.318799][ T4674] EXT4-fs (loop4): dirty_blocks=64 [ 93.323941][ T4674] EXT4-fs (loop4): Block reservation details [ 93.332526][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.349849][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.390083][ T6715] loop4: detected capacity change from 0 to 1024 [ 93.411935][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.419069][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.425218][ T6715] ext3: Unknown parameter 'obj_type' [ 93.450375][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.457629][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.547371][ T6622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.612713][ T6709] loop3: detected capacity change from 0 to 2048 [ 93.659672][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.666029][ T6716] blktrace: Concurrent blktraces are not allowed on loop8 [ 93.683641][ T6731] netlink: 'syz.1.773': attribute type 13 has an invalid length. [ 93.692905][ T6709] loop3: p1 < > p4 [ 93.710718][ T6709] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.748122][ T3005] loop3: p1 < > p4 [ 93.755133][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 93.797186][ T6731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.812819][ T3422] lo speed is unknown, defaulting to 1000 [ 93.938556][ T6756] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 93.982259][ T6758] loop4: detected capacity change from 0 to 1764 [ 94.054388][ T6622] veth0_vlan: entered promiscuous mode [ 94.068912][ T6622] veth1_vlan: entered promiscuous mode [ 94.108493][ T6622] veth0_macvtap: entered promiscuous mode [ 94.125051][ T6622] veth1_macvtap: entered promiscuous mode [ 94.139572][ T6769] loop4: detected capacity change from 0 to 512 [ 94.140598][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.158718][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.168568][ T6769] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.782: error while reading EA inode 32 err=-116 [ 94.201231][ T6769] EXT4-fs (loop4): Remounting filesystem read-only [ 94.208589][ T5759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.209695][ T6769] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 94.221275][ T5759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.237622][ T5759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.238550][ T6769] EXT4-fs (loop4): 1 orphan inode deleted [ 94.257065][ T6769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.259908][ T5759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288585][ T6769] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.333214][ T6785] loop0: detected capacity change from 0 to 1024 [ 94.346104][ T6781] loop5: detected capacity change from 0 to 512 [ 94.357272][ T6785] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 94.388934][ T6785] sctp: [Deprecated]: syz.0.785 (pid 6785) Use of int in maxseg socket option. [ 94.388934][ T6785] Use struct sctp_assoc_value instead [ 94.450818][ T6781] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 94.463785][ T6769] __nla_validate_parse: 8 callbacks suppressed [ 94.463802][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 94.517803][ T6781] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 94.533475][ T6781] EXT4-fs (loop5): 1 truncate cleaned up [ 94.540790][ T6781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.689179][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.723082][ T6817] netlink: 72 bytes leftover after parsing attributes in process `syz.5.793'. [ 94.780677][ T6822] 9pnet_fd: Insufficient options for proto=fd [ 94.812513][ T6827] loop0: detected capacity change from 0 to 128 [ 94.822028][ T6831] xt_hashlimit: max too large, truncated to 1048576 [ 94.830800][ T6827] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.838701][ T6827] FAT-fs (loop0): Filesystem has been set read-only [ 94.845432][ T6827] bio_check_eod: 3085 callbacks suppressed [ 94.845492][ T6827] syz.0.794: attempt to access beyond end of device [ 94.845492][ T6827] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 94.867261][ T6827] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.875246][ T6827] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 94.885487][ T6834] netlink: 36 bytes leftover after parsing attributes in process `syz.3.798'. [ 94.894723][ T6827] syz.0.794: attempt to access beyond end of device [ 94.894723][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.908738][ T6827] syz.0.794: attempt to access beyond end of device [ 94.908738][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.922666][ T6827] syz.0.794: attempt to access beyond end of device [ 94.922666][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.938619][ T6827] syz.0.794: attempt to access beyond end of device [ 94.938619][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.964370][ T6827] syz.0.794: attempt to access beyond end of device [ 94.964370][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.977960][ T6827] syz.0.794: attempt to access beyond end of device [ 94.977960][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 94.999227][ T6827] syz.0.794: attempt to access beyond end of device [ 94.999227][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.013009][ T6827] syz.0.794: attempt to access beyond end of device [ 95.013009][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.026841][ T6827] syz.0.794: attempt to access beyond end of device [ 95.026841][ T6827] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.102618][ T6851] netlink: 240 bytes leftover after parsing attributes in process `syz.1.799'. [ 95.120817][ T6853] program syz.3.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.135321][ T6837] netlink: 'syz.1.799': attribute type 3 has an invalid length. [ 95.202904][ T6860] loop3: detected capacity change from 0 to 256 [ 95.284537][ T6860] FAT-fs (loop3): Directory bread(block 64) failed [ 95.298995][ T6860] FAT-fs (loop3): Directory bread(block 65) failed [ 95.305672][ T6860] FAT-fs (loop3): Directory bread(block 66) failed [ 95.317496][ T6860] FAT-fs (loop3): Directory bread(block 67) failed [ 95.324270][ T6860] FAT-fs (loop3): Directory bread(block 68) failed [ 95.334287][ T6860] FAT-fs (loop3): Directory bread(block 69) failed [ 95.342277][ T6860] FAT-fs (loop3): Directory bread(block 70) failed [ 95.349217][ T6860] FAT-fs (loop3): Directory bread(block 71) failed [ 95.356044][ T6860] FAT-fs (loop3): Directory bread(block 72) failed [ 95.365136][ T6860] FAT-fs (loop3): Directory bread(block 73) failed [ 95.708830][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.814'. [ 95.722599][ T6897] loop4: detected capacity change from 0 to 512 [ 95.741039][ T6899] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.759545][ T6897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.772647][ T6897] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.806279][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.851744][ T6906] loop3: detected capacity change from 0 to 8192 [ 95.965572][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.008817][ T6910] bridge_slave_0: entered promiscuous mode [ 96.030634][ T6910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.373307][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 96.373322][ T29] audit: type=1400 audit(1764451918.608:7246): avc: denied { ioctl } for pid=6931 comm="syz.1.826" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.453638][ T6943] loop4: detected capacity change from 0 to 128 [ 96.471022][ T29] audit: type=1400 audit(1764451918.638:7247): avc: denied { shutdown } for pid=6925 comm="syz.3.823" lport=41807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.504861][ T6944] loop3: detected capacity change from 0 to 512 [ 96.521156][ T6943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.528635][ T6944] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.529058][ T6943] FAT-fs (loop4): Filesystem has been set read-only [ 96.552760][ T6943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.552861][ T6944] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.560903][ T6943] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 96.567299][ T6944] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 96.597102][ T6944] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.827: attempt to clear invalid blocks 2 len 1 [ 96.610093][ T6950] Buffer I/O error on dev loop4, logical block 2065, async page read [ 96.637232][ T6950] Buffer I/O error on dev loop4, logical block 2066, async page read [ 96.646446][ T6950] Buffer I/O error on dev loop4, logical block 2067, async page read [ 96.654759][ T6944] EXT4-fs (loop3): Remounting filesystem read-only [ 96.662073][ T6944] EXT4-fs (loop3): 1 truncate cleaned up [ 96.667934][ T6950] Buffer I/O error on dev loop4, logical block 2068, async page read [ 96.676089][ T6950] Buffer I/O error on dev loop4, logical block 2069, async page read [ 96.684705][ T6950] Buffer I/O error on dev loop4, logical block 2070, async page read [ 96.693048][ T6950] Buffer I/O error on dev loop4, logical block 2071, async page read [ 96.701500][ T6950] Buffer I/O error on dev loop4, logical block 2072, async page read [ 96.708131][ T6944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.709863][ T6950] Buffer I/O error on dev loop4, logical block 2065, async page read [ 96.722037][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 96.740285][ T6950] Buffer I/O error on dev loop4, logical block 2066, async page read [ 96.804153][ T6944] xt_hashlimit: max too large, truncated to 1048576 [ 96.821383][ T6944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.848064][ T6944] netlink: 'syz.3.827': attribute type 7 has an invalid length. [ 96.855772][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 96.905594][ T29] audit: type=1326 audit(1764451919.138:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 96.935812][ T29] audit: type=1326 audit(1764451919.138:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 96.959348][ T29] audit: type=1326 audit(1764451919.168:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 96.982755][ T29] audit: type=1326 audit(1764451919.168:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 97.006090][ T29] audit: type=1326 audit(1764451919.168:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 97.029585][ T29] audit: type=1326 audit(1764451919.168:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9052ba15dc code=0x7ffc0000 [ 97.052884][ T29] audit: type=1326 audit(1764451919.168:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 97.076246][ T29] audit: type=1326 audit(1764451919.168:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6963 comm="syz.1.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9052b9f749 code=0x7ffc0000 [ 97.192719][ T6975] netlink: 204 bytes leftover after parsing attributes in process `syz.1.839'. [ 97.202307][ T6975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.839'. [ 97.268549][ T6977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.839'. [ 97.289253][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.419651][ T6899] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.520209][ T6991] loop4: detected capacity change from 0 to 1024 [ 97.578396][ T6991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.617917][ T6999] veth0: entered promiscuous mode [ 97.648758][ T6999] veth0: left promiscuous mode [ 97.669585][ T6899] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.690167][ T6991] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.843: Allocating blocks 385-513 which overlap fs metadata [ 97.716551][ T7001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.737539][ T6991] EXT4-fs (loop4): pa ffff8881072421c0: logic 16, phys. 129, len 24 [ 97.745624][ T6991] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 97.759060][ T6899] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.807284][ T7001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.819346][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.849215][ T4674] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.886493][ T4674] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.901055][ T7001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.931555][ T4663] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.950524][ T7011] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 97.963551][ T4663] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.972616][ T7011] SELinux: failed to load policy [ 97.988382][ T7001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.041098][ T7016] loop5: detected capacity change from 0 to 512 [ 98.051803][ T7016] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.101164][ T7018] loop4: detected capacity change from 0 to 512 [ 98.115154][ T7016] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.853: corrupted in-inode xattr: invalid ea_ino [ 98.131171][ T7018] EXT4-fs (loop4): first meta block group too large: 100663296 (group descriptor block count 1) [ 98.146385][ T7016] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.853: couldn't read orphan inode 15 (err -117) [ 98.167131][ T7016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.224943][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.245750][ T7029] pim6reg: entered allmulticast mode [ 98.268558][ T7029] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 98.280915][ T4674] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.292597][ T4674] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.304132][ T4674] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.316560][ T7029] SELinux: failed to load policy [ 98.326718][ T4674] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.396798][ T7035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7035 comm=syz.5.857 [ 98.421973][ T7040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.435036][ T7038] loop4: detected capacity change from 0 to 2048 [ 98.466749][ T7038] EXT4-fs: Ignoring removed i_version option [ 98.477566][ T7040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.527759][ T7038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.544257][ T7043] bridge_slave_0: left promiscuous mode [ 98.550062][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.579231][ T7043] bridge_slave_1: left allmulticast mode [ 98.584939][ T7043] bridge_slave_1: left promiscuous mode [ 98.590716][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.612280][ T7038] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.644698][ T7043] bond0: (slave bond_slave_0): Releasing backup interface [ 98.756301][ T7043] bond0: (slave bond_slave_1): Releasing backup interface [ 98.870435][ T7043] team0: Port device team_slave_0 removed [ 98.910617][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.918119][ T7043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.928379][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.935841][ T7043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.966997][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.038859][ T7043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.079591][ T3422] syz0: Port: 1 Link DOWN [ 99.097666][ T7054] program syz.4.862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.548319][ T7088] loop0: detected capacity change from 0 to 4096 [ 99.561844][ T7090] __nla_validate_parse: 1 callbacks suppressed [ 99.561928][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 99.587181][ T7088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.713541][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.729464][ T7090] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 99.738362][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.872'. [ 99.837662][ T7090] team0: Port device geneve1 added [ 99.899135][ T7115] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 99.911321][ T7115] SELinux: failed to load policy [ 100.292877][ T7139] loop0: detected capacity change from 0 to 256 [ 100.435889][ T7152] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 100.453990][ T7152] SELinux: failed to load policy [ 100.491009][ T7159] loop0: detected capacity change from 0 to 1024 [ 100.547359][ T7159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.560517][ T7159] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.592362][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /189/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 100.615676][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /189/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 100.636972][ T3317] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 100.656088][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /189/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 100.677894][ T3317] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 100.698838][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /189/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 100.720732][ T3317] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 100.746546][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /189/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 100.768134][ T3317] EXT4-fs error (device loop0): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 100.787653][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 100.797106][ T7167] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 100.805098][ T3317] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /189/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 100.856506][ T7169] loop4: detected capacity change from 0 to 512 [ 100.897636][ T7169] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.928462][ T4129] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.939214][ T3315] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 101.023511][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 101.038717][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 101.042739][ T7177] loop3: detected capacity change from 0 to 1024 [ 101.200863][ T7185] lo speed is unknown, defaulting to 1000 [ 101.327721][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.336187][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.534582][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.576782][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 101.576799][ T29] audit: type=1400 audit(1764451923.818:7597): avc: denied { rename } for pid=7170 comm="syz.3.896" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.605358][ T29] audit: type=1400 audit(1764451923.818:7598): avc: denied { rename } for pid=7170 comm="syz.3.896" name="file1" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.627647][ T29] audit: type=1400 audit(1764451923.818:7599): avc: denied { reparent } for pid=7170 comm="syz.3.896" name="file1" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.665614][ T29] audit: type=1400 audit(1764451923.838:7600): avc: denied { mounton } for pid=7197 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 101.666661][ T7199] IPVS: Error connecting to the multicast addr [ 101.702667][ T29] audit: type=1400 audit(1764451923.938:7601): avc: denied { bind } for pid=7200 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.722119][ T29] audit: type=1400 audit(1764451923.938:7602): avc: denied { listen } for pid=7200 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.817638][ T7221] loop4: detected capacity change from 0 to 512 [ 101.844245][ T29] audit: type=1326 audit(1764451924.048:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7220 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 101.867741][ T29] audit: type=1326 audit(1764451924.048:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7220 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 101.891422][ T29] audit: type=1326 audit(1764451924.048:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7220 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 101.914820][ T29] audit: type=1326 audit(1764451924.048:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7220 comm="syz.4.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7fa4d8f783 code=0x7ffc0000 [ 101.969602][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.978822][ T7221] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.991110][ T7197] lo speed is unknown, defaulting to 1000 [ 102.034618][ T7221] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 102.063757][ T7221] EXT4-fs (loop4): 1 truncate cleaned up [ 102.069927][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.091595][ T7234] veth0: entered promiscuous mode [ 102.134248][ T7234] veth0: left promiscuous mode [ 102.181134][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.186640][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 102.260648][ T7242] loop4: detected capacity change from 0 to 1024 [ 102.286693][ T7242] EXT4-fs: Ignoring removed orlov option [ 102.306511][ T7247] SELinux: ebitmap: empty map [ 102.311530][ T7247] SELinux: failed to load policy [ 102.312961][ T7242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.351856][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.359089][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.366706][ T7197] bridge_slave_0: entered allmulticast mode [ 102.367619][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.373675][ T7197] bridge_slave_0: entered promiscuous mode [ 102.389076][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.396283][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.405315][ T7197] bridge_slave_1: entered allmulticast mode [ 102.412517][ T7197] bridge_slave_1: entered promiscuous mode [ 102.459686][ T7259] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 102.474835][ T7259] bond2 (unregistering): Released all slaves [ 102.496937][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.509020][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.555578][ T7197] team0: Port device team_slave_0 added [ 102.565412][ T7197] team0: Port device team_slave_1 added [ 102.632040][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.639105][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.665129][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.756470][ T7291] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 102.765284][ T7291] netlink: 'syz.1.921': attribute type 39 has an invalid length. [ 102.802269][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.809365][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.835407][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.872815][ T7197] hsr_slave_0: entered promiscuous mode [ 102.879127][ T7197] hsr_slave_1: entered promiscuous mode [ 102.885021][ T7197] debugfs: 'hsr0' already exists in 'hsr' [ 102.890819][ T7197] Cannot create hsr debugfs directory [ 103.010063][ T7197] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.026757][ T7197] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.036487][ T7197] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.046142][ T7197] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.065905][ T7313] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 103.082937][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.086651][ T7313] SELinux: failed to load policy [ 103.090090][ T7197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.102347][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.109533][ T7197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.149689][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.162019][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.190301][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.209289][ T7324] netlink: 176 bytes leftover after parsing attributes in process `syz.1.928'. [ 103.219024][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.238166][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.245278][ T4678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.256999][ T7324] netlink: 'syz.1.928': attribute type 30 has an invalid length. [ 103.260225][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.271957][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.398105][ T7335] veth2: entered allmulticast mode [ 103.431846][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.446737][ T7338] loop4: detected capacity change from 0 to 512 [ 103.504588][ T7338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.527548][ T7338] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 103.613617][ T7344] lo speed is unknown, defaulting to 1000 [ 103.629288][ T7338] EXT4-fs (loop4): shut down requested (1) [ 103.704890][ T7338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.711750][ T7364] loop5: detected capacity change from 0 to 1024 [ 103.764221][ T7197] veth0_vlan: entered promiscuous mode [ 103.774888][ T7377] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 103.791537][ T7364] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 103.792927][ T7197] veth1_vlan: entered promiscuous mode [ 103.805573][ T7377] SELinux: failed to load policy [ 103.813970][ T7364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.857203][ T7364] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.936: bg 0: block 88: padding at end of block bitmap is not set [ 103.951278][ T7364] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.936'. [ 103.961033][ T7378] lo speed is unknown, defaulting to 1000 [ 103.969716][ T7197] veth0_macvtap: entered promiscuous mode [ 103.980944][ T7197] veth1_macvtap: entered promiscuous mode [ 103.993881][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.044338][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.053344][ T6622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.096292][ T7390] loop3: detected capacity change from 0 to 128 [ 104.132039][ T4689] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.165549][ T5759] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.197032][ T7399] msdos: Unknown parameter 'ÿÿ1844674407370955161501777777777777777777777ÿÿ0xffffffffffffffff01777777777777777777777ÿÿ0177777777777777777777701777777777777777777777ÿÿ' [ 104.218535][ T7393] netlink: 'syz.5.943': attribute type 1 has an invalid length. [ 104.243544][ T5759] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.252500][ T5759] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.396271][ T7418] netlink: 'syz.5.947': attribute type 13 has an invalid length. [ 104.404061][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.947'. [ 104.444705][ T7421] netlink: 'syz.3.949': attribute type 29 has an invalid length. [ 104.480090][ T7422] netlink: 'syz.3.949': attribute type 29 has an invalid length. [ 104.623765][ T7432] netlink: 'syz.5.951': attribute type 3 has an invalid length. [ 104.648541][ T7434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.872450][ T7441] lo speed is unknown, defaulting to 1000 [ 104.993000][ T7456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 104.999582][ T7456] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.007522][ T7456] vhci_hcd vhci_hcd.0: Device attached [ 105.080189][ T7459] vhci_hcd: connection closed [ 105.084747][ T5759] vhci_hcd: stop threads [ 105.093925][ T5759] vhci_hcd: release socket [ 105.098412][ T5759] vhci_hcd: disconnect device [ 105.414923][ T7469] loop5: detected capacity change from 0 to 512 [ 105.441379][ T7469] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.467977][ T7469] EXT4-fs error (device loop5): ext4_quota_enable:7132: comm syz.5.962: Bad quota inum: 2, type: 1 [ 105.479194][ T7469] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 105.508730][ T6622] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 105.606475][ T7475] loop5: detected capacity change from 0 to 2048 [ 105.650391][ T7475] Alternate GPT is invalid, using primary GPT. [ 105.657174][ T7475] loop5: p2 p3 p7 [ 106.094702][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.977'. [ 106.274745][ T7537] netlink: 'syz.4.983': attribute type 30 has an invalid length. [ 106.388880][ T7550] loop4: detected capacity change from 0 to 512 [ 106.431758][ T7550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.454222][ T7550] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.494777][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.515774][ T6126] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.610604][ T7569] tipc: Enabling of bearer rejected, failed to enable media [ 106.612476][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 106.612496][ T29] audit: type=1326 audit(1764451928.848:8167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.649231][ T29] audit: type=1326 audit(1764451928.848:8168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.658737][ T7569] loop4: detected capacity change from 0 to 1024 [ 106.672659][ T29] audit: type=1326 audit(1764451928.848:8169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.702478][ T29] audit: type=1326 audit(1764451928.848:8170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.716763][ T7569] EXT4-fs: Ignoring removed oldalloc option [ 106.726021][ T29] audit: type=1326 audit(1764451928.848:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.755140][ T29] audit: type=1326 audit(1764451928.848:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.778957][ T29] audit: type=1326 audit(1764451928.848:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d8f749 code=0x7ffc0000 [ 106.802418][ T29] audit: type=1326 audit(1764451928.848:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fa4d91667 code=0x7ffc0000 [ 106.825698][ T29] audit: type=1326 audit(1764451928.848:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7fa4d915dc code=0x7ffc0000 [ 106.849021][ T29] audit: type=1326 audit(1764451928.848:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7fa4d91514 code=0x7ffc0000 [ 106.877605][ T7571] tls_set_device_offload: netdev not found [ 106.893722][ T7569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.926364][ T7569] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.947425][ T7569] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.990: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.961297][ T7569] EXT4-fs (loop4): Remounting filesystem read-only [ 106.961986][ T7571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.969593][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 106.979102][ T7585] loop5: detected capacity change from 0 to 1024 [ 106.987243][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 107.020245][ T7569] erspan1: entered promiscuous mode [ 107.026064][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.061716][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.071170][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.086780][ T7585] EXT4-fs (loop5): mount failed [ 107.091092][ T7572] lo speed is unknown, defaulting to 1000 [ 107.127593][ T7571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.147863][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.159516][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.171362][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.219584][ T7585] EXT4-fs (loop5): mount failed [ 107.226010][ T7589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32206 sclass=netlink_route_socket pid=7589 comm=syz.4.993 [ 107.269971][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.284784][ T7572] chnl_net:caif_netlink_parms(): no params data found [ 107.306576][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.310362][ T7600] loop4: detected capacity change from 0 to 2048 [ 107.337983][ T7571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.340279][ T7600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.365457][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.390129][ T7600] netlink: 277 bytes leftover after parsing attributes in process `syz.4.995'. [ 107.418878][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.429357][ T7585] EXT4-fs (loop5): mount failed [ 107.458085][ T7571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.471393][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.486573][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.512773][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.528758][ T7585] EXT4-fs (loop5): mount failed [ 107.534933][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.542487][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.555224][ T7609] 9pnet_fd: Insufficient options for proto=fd [ 107.561475][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.572124][ T7572] bridge_slave_0: entered allmulticast mode [ 107.579128][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.579263][ T7572] bridge_slave_0: entered promiscuous mode [ 107.596737][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.603843][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.611436][ T7572] bridge_slave_1: entered allmulticast mode [ 107.618247][ T7572] bridge_slave_1: entered promiscuous mode [ 107.626068][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.654347][ T7585] EXT4-fs (loop5): mount failed [ 107.664218][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.678371][ T4670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.694774][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.696944][ T4670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.710723][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.731184][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.748607][ T4670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.770561][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.786321][ T7585] EXT4-fs (loop5): mount failed [ 107.807052][ T7572] team0: Port device team_slave_0 added [ 107.815626][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.826766][ T4670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.836723][ T7572] team0: Port device team_slave_1 added [ 107.845293][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.861372][ T7625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7625 comm=syz.3.1000 [ 107.866442][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 107.881632][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 107.889530][ T7585] EXT4-fs (loop5): mount failed [ 107.897669][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 107.911388][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 107.922262][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.929273][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.933460][ T7585] loop5: detected capacity change from 0 to 1024 [ 107.955223][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.955977][ T7626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7626 comm=syz.3.1000 [ 107.989452][ T7625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 108.000575][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.007599][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.033752][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.059788][ T7630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1001'. [ 108.083302][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.099550][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.121960][ T7585] EXT4-fs (loop5): mount failed [ 108.156597][ T6126] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.167382][ T7585] loop5: detected capacity change from 0 to 1024 [ 108.177110][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.190449][ T7572] hsr_slave_0: entered promiscuous mode [ 108.197032][ T7572] hsr_slave_1: entered promiscuous mode [ 108.206912][ T7572] debugfs: 'hsr0' already exists in 'hsr' [ 108.212731][ T7572] Cannot create hsr debugfs directory [ 108.221478][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.237197][ T7585] EXT4-fs (loop5): mount failed [ 108.262662][ T7585] loop5: detected capacity change from 0 to 1024 [ 108.270205][ T6126] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.281274][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.294538][ T7647] loop4: detected capacity change from 0 to 256 [ 108.316067][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.335096][ T7585] EXT4-fs (loop5): mount failed [ 108.343446][ T6126] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.367930][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1006'. [ 108.380888][ T7585] loop5: detected capacity change from 0 to 1024 [ 108.396572][ T7585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.407989][ T3005] ================================================================== [ 108.416117][ T3005] BUG: KCSAN: data-race in d_delete / lookup_fast [ 108.422564][ T3005] [ 108.424896][ T3005] read-write to 0xffff88811a2859c0 of 4 bytes by task 3538 on cpu 1: [ 108.432967][ T3005] d_delete+0x15a/0x180 [ 108.437133][ T3005] d_delete_notify+0x32/0x100 [ 108.441823][ T3005] vfs_unlink+0x30b/0x420 [ 108.446168][ T3005] do_unlinkat+0x24e/0x480 [ 108.450602][ T3005] __x64_sys_unlink+0x2e/0x40 [ 108.455297][ T3005] x64_sys_call+0x2dcf/0x3000 [ 108.459989][ T3005] do_syscall_64+0xd2/0x200 [ 108.464528][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.470457][ T3005] [ 108.472788][ T3005] read to 0xffff88811a2859c0 of 4 bytes by task 3005 on cpu 0: [ 108.480337][ T3005] lookup_fast+0xf0/0x320 [ 108.484691][ T3005] walk_component+0x3f/0x220 [ 108.489316][ T3005] path_lookupat+0xfe/0x2a0 [ 108.493930][ T3005] filename_lookup+0x147/0x340 [ 108.498722][ T3005] do_readlinkat+0x7d/0x320 [ 108.503234][ T3005] __x64_sys_readlink+0x47/0x60 [ 108.508097][ T3005] x64_sys_call+0x28de/0x3000 [ 108.512788][ T3005] do_syscall_64+0xd2/0x200 [ 108.517300][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.523203][ T3005] [ 108.525531][ T3005] value changed: 0x00300180 -> 0x00004080 [ 108.531250][ T3005] [ 108.533574][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 108.539738][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 108.550599][ T3005] Tainted: [W]=WARN [ 108.554409][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.564470][ T3005] ================================================================== [ 108.659152][ T7585] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 108.686167][ T7585] EXT4-fs (loop5): mount failed [ 108.800249][ T6126] bridge_slave_1: left allmulticast mode [ 108.806088][ T6126] bridge_slave_1: left promiscuous mode [ 108.811781][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.820788][ T6126] bridge_slave_0: left allmulticast mode [ 108.826730][ T6126] bridge_slave_0: left promiscuous mode [ 108.832531][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.938525][ T6126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.948843][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.959573][ T6126] bond0 (unregistering): Released all slaves [ 109.042201][ T6126] hsr_slave_0: left promiscuous mode [ 109.048241][ T6126] hsr_slave_1: left promiscuous mode [ 109.053871][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.061410][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.069136][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.076621][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.087329][ T6126] veth1_macvtap: left promiscuous mode [ 109.092882][ T6126] veth0_macvtap: left promiscuous mode [ 109.098460][ T6126] veth1_vlan: left promiscuous mode [ 109.103847][ T6126] veth0_vlan: left promiscuous mode [ 109.188886][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 109.200617][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 109.629128][ T6126] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.677629][ T6126] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.747848][ T6126] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.807655][ T6126] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.883801][ T6126] bridge_slave_1: left allmulticast mode [ 109.889557][ T6126] bridge_slave_1: left promiscuous mode [ 109.895235][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.903072][ T6126] bridge_slave_0: left allmulticast mode [ 109.908815][ T6126] bridge_slave_0: left promiscuous mode [ 109.914422][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.922617][ T6126] bridge_slave_1: left allmulticast mode [ 109.928309][ T6126] bridge_slave_1: left promiscuous mode [ 109.933931][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.941695][ T6126] bridge_slave_0: left allmulticast mode [ 109.947401][ T6126] bridge_slave_0: left promiscuous mode [ 109.953222][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.028741][ T6126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.038914][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.048639][ T6126] bond0 (unregistering): Released all slaves [ 110.108320][ T6126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.118602][ T6126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.128150][ T6126] bond0 (unregistering): Released all slaves [ 110.241274][ T6126] hsr_slave_0: left promiscuous mode [ 110.247459][ T6126] hsr_slave_1: left promiscuous mode [ 110.253300][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.260727][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.269099][ T6126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.276621][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.285496][ T6126] hsr_slave_0: left promiscuous mode [ 110.291294][ T6126] hsr_slave_1: left promiscuous mode [ 110.297585][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.305034][ T6126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.315643][ T6126] veth1_macvtap: left promiscuous mode [ 110.321171][ T6126] veth0_macvtap: left promiscuous mode [ 110.378347][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 110.388062][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 110.439124][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 110.449204][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 114.366335][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!