last executing test programs: 22.411845898s ago: executing program 2 (id=228): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffff8, 0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffdaa, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x60000851) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x44000006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES8=0xffffffffffffffff], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x22, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES8=r4, @ANYRES32=0x1], 0x0, 0xca61, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) pwrite64(r5, &(0x7f0000000b00)="3708c70f70e244b7878fedf0c0c6c2ff2f520255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e635469675e05a16daaef0ee6da460dc67bc77adf257d1dd83ea3530826125b35c705075e7e20d5ede58b31f2bd6b3a9c340886f76c5372307dbcc2bc1461b3334b718bee325f3e7f37ddd748827903f156ed541646e37d18cab3ed17099f18e18e2776505e64506704128c857492fcbb51adf06cd695f1517c9b45f4", 0xaa, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4004c002}, 0x200c014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="360302519fb3499109adeb560d4b6832d059b2a3d8872dcd9476a8034ebfb7f2b79f1dd0f1cc443e8d9c5d57800dc1dd250e5817f4e48bd89a0f74115e171db32c39144628078439c21a6f33efee57fd572c1552482f1f249c48668683800ef528be703abce4f657b21fe67950cc3393d3cc410c4f4d4a3efe0a5c7fcdf1caa211e5ba13521942e831396267f2e13020931769a8c0a35f775d9b92b0bef05104a6dfcb3ab49e7c7cf902b2ac3f63626fa6b9a4fc6501e57eb66b9df3e4566118a211dc48e9053679a4988e9187c4db62cd948f2f6c91f1a6fa366b048af0b194053ff0598118605e8078d22b4384e57457eeaf4076"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048c05}, 0x400c151) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000e22b0a3560f5f6b9584d659276704e35d243c0c4ceb6c6eaa104a05803432aa4ad88f38f3c3a4c9a44a3b4459a33729478d4d0af1c72b8e35cc5b07e4d2ddb5da243522f9d053660b49d872a85a7b481c71d84f1f82e72cbe391f8013ba15f9ce755643e41523bab7a9cc60bf4847c52a67fa2b99d58fc803e0197c5bfe94a2872faab10f182d2d922638a892fcbed45f115b0be7353dc532602fa63441f95480e6a858e3dd5894f682da5ef1a2a8a60f340c74d0b5d1d6632c4887a8e0beaacc21fb1fbdc60b88cdc9ae66534b319420186fe9044db054c4ee32437b00d37e195d530c2be477ea2d9b48d0c9c887d13eee6d1", @ANYRES16=r6], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a02"], &(0x7f0000000000)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd700200000025090002007379fb0000000000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) 22.008041785s ago: executing program 2 (id=230): r0 = socket(0x8000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0xfffffffffffffff9, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000180)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2d1, &(0x7f0000000c80)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000c00)='./file2\x00', 0x20000502) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 21.687695139s ago: executing program 2 (id=236): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffeff}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES8=r1], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000080)=0x1, 0x4) r7 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRES64=r4, @ANYRES8, @ANYRES32=r0, @ANYBLOB, @ANYRES8=r7, @ANYRES16=r5], 0x48}, 0x1, 0x0, 0x0, 0x24040801}, 0x20000000) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB="09000000f9ffffff0c000000ba0c0000580001003160cf8268b3c21869bc1e293e2b782c6983bea1b1b37c998d508bbbb68e32bb054afadcd76ced199a654b84fb3eb69e2df6c7441beb057c4849000500b5040001000000000000000004d1a0ab05c9391633be2dbdd37ff29e23479e01768f4379d44b54e114700d60d92c2df5a201fd84bab3a3e79af5a6f969c3d68bb571533c89fab8b9b1603405281d14455401559d713985556d7615e98898247e7e0c22c3b9577ea184f670df053edb960000000000", @ANYRESHEX=r1, @ANYRESDEC=r6], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = fsmount(r5, 0x0, 0x4) openat(r9, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x17, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702b7030000000800008500000083000400bf0900000000000055090100000000009500000000010000008500000084000000b7000000000000009500000000000082f65e9018c77e80de8fa3"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x18) syslog(0x9, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x8) pwritev2(r11, &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000001100)={0x2, 0x1, 0x0, 0x2}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r12 = socket$caif_stream(0x25, 0x1, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='svcrdma_decode_wseg\x00', r13}, 0x18) sendmmsg$inet(r12, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 21.361005783s ago: executing program 2 (id=239): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b80)={'team_slave_0\x00', 0x2900}) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x50, 0x10000, 0x0, 0x5, 0x8, 0x20205, 0x1, 0x0, 0x8023, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES8, @ANYRES64=r3], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x7, &(0x7f0000000b00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000009c0)='dns_resolver\x00', &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000d4ee000000000000000095694ab4f41e0000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = getpgid(0x0) sched_getparam(r9, &(0x7f0000000200)) 21.19196716s ago: executing program 2 (id=240): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x561b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xa009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000027c0), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') lsetxattr$security_evm(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000140)=@ng={0x4, 0x9, "4fac77053f45c65dda60408615"}, 0xf, 0x3) eventfd2(0x5, 0x400) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r3, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r7, 0x400, 0x0) close(r7) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="18830000", @ANYRES16=r3, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x24000c00}, 0x8041) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) fcntl$setlease(r0, 0x400, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 21.016950338s ago: executing program 2 (id=242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r8, 0x0, 0x4804}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 20.994419049s ago: executing program 32 (id=242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000700)=@in6={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000006c0)="01cca9", 0x3}], 0x1, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x30, 0x8000}, 0x2800c055) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r8, 0x0, 0x4804}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 5.507122791s ago: executing program 3 (id=425): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x282094, &(0x7f0000000580)={[{@sysvgroups}, {@dax}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x6d2015fd}}, {@noacl}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@pcr={'pcr', 0x3d, 0x3}}, {@context={'context', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x36, 0x63, 0x34, 0x37, 0x39, 0x31, 0x38], 0x2d, [0x36, 0x65, 0x35, 0x65], 0x2d, [0x30, 0x38, 0x37, 0x66], 0x2d, [0x35, 0x32, 0x39, 0x62], 0x2d, [0x37, 0x31, 0x32, 0x39, 0x31, 0x31, 0x37, 0x66]}}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x5a0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x4d0, 0x4d0, 0x4d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2c, 0xfc, 0xa, 0x1, 0x1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], [0xff, 0x0, 0xffffffff], 0x2, 0x4}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x34, 0x9, {0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff, 0x0, 0xff000000, 0xff], [0xffffffff, 0xff000000], 'pimreg\x00', 'team0\x00', {}, {}, 0x5e, 0xf8, 0x4, 0x41}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x15a4, 0xd6], 0x6, 0x32613970bd857fb1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}], 0x6}}, @common=@dst={{0x48}, {0x8, 0x2, 0x1, [0x4, 0x0, 0x0, 0xfffd, 0x9, 0x7ff, 0x8, 0x7, 0x9, 0x7, 0x1, 0x7, 0x0, 0x6, 0xfffb, 0x3e82], 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'virt_wifi0\x00', {0x2}}}}, {{@ipv6={@local, @empty, [0x0, 0xff, 0xffffffff, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'netdevsim0\x00', 'veth1_to_bond\x00', {}, {}, 0x3c, 0x6, 0x6, 0x20}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x0, 0xffff, 0x4, 0x80, 0xd3, 0xc0, 0x4]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0xf}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="01000000d085e7a58e9b640085000000a50000009504000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0xf5b8086973923d88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r13, 0x0, 0x7ff, 0x0) splice(r12, 0x0, r11, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x8, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3.859983452s ago: executing program 3 (id=437): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, 0xffffffffffffffff, 0x2) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="785db22114c80000000088f6f8197034003d7000000600"/33], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffcaa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r8 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000ce3a0c2e00"/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2001b0000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r9, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) setitimer(0x0, &(0x7f0000000180), &(0x7f00000001c0)) 3.487925779s ago: executing program 3 (id=442): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lseek(r0, 0xffffff60, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x7, 0x8, 0x8, 0x2061}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xffeff034}, {0xb, 0x81, 0x9, 0x5}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000480)=@raw=[@alu={0x7, 0x1, 0xa, 0x2, 0xa, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x91}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}, @generic={0x7, 0x2, 0x4, 0x5, 0x18}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) creat(&(0x7f0000000040)='./file0\x00', 0x4) 2.677964244s ago: executing program 3 (id=454): unshare(0x6c000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="000228bd7000fedbdf25460000000800010070636900110002003030"], 0xc8}, 0x1, 0x0, 0x0, 0x20008001}, 0x4080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="310300000000fcdbdf250900000008000300", @ANYRES32=r2, @ANYBLOB="080006"], 0x24}}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r4 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) setitimer(0x0, 0x0, 0x0) unshare(0x0) r7 = socket$caif_stream(0x25, 0x1, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) finit_module(r8, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x1, 0x2c43, 0x9fe, 0x2800000000000, 0x0, 0x6, 0x0, 0x2902, 0x20, 0x3ad, 0x8, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r8, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/2160], 0x873) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 1.929945826s ago: executing program 1 (id=464): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r4, 0x0, 0x200002e6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(r4, 0x407, 0x7000000) fcntl$setpipe(r3, 0x407, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r7, 0x0, 0x1000) preadv(r6, 0x0, 0x0, 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.83921915s ago: executing program 5 (id=466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e0d, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x202, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="05005c3d1c730000ff0f000005", @ANYRES8=r1, @ANYRES32=r2, @ANYRESOCT=r7, @ANYBLOB="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"], 0x50) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000800}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) r12 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r9, 0x0, 0x0}) io_uring_enter(r12, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r12, r8, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1.827557541s ago: executing program 4 (id=468): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB="00000000000008000000000003000000ca000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x39}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003100000002cbd7040fcdbdf2502000900080000001c0000000000000005000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000eab46766f4b6b06533882109e476bff237a463578182fec3916c3d5d7d435d2515f6a2f28cb17aba8c48c6a18e4f75c193"], 0x80}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000700)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000600)={0x8, 0x80, 0x7, 0x0, 0x0, 0xff, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8080, 0x2, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001cc0)=ANY=[@ANYRES16=r0, @ANYBLOB="f462f581f51cff078a357179bfe8c6c3d5193f0c91a59fe03d196f2cc7d6fce46b5b275d5d27905c54d66065e503a2868547665062555d017225dc99a619995f2fe6ba192ba2a05ff36576683ddfc770bc6ce9f290fbeae1bbf6fe256cd9640c42fa5b4f53c43dbf3b7107defacf6e10d5c1cd198572a1d7d493403dd841c66df97213472ddc3e43abc325a67662655973e7fc640cc3398f85ef6d4a04341ed9487b5c8e8f938903f12a74df48451f5be7394907b8c250e95b140b1b2c1c5c7730fcf1006337abe5166006b5eb5d107f7ee9", @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', r7, 0x4, 0x10, 0xc0, 0x6, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x7800, 0x8, 0xc14, 0xffff}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) 1.562160072s ago: executing program 0 (id=470): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xdc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x101, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10) 1.538875283s ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = creat(0x0, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000940)=ANY=[@ANYBLOB="00020201"], 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 1.326409202s ago: executing program 0 (id=472): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0xfffe, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='cachefiles_trunc\x00', r8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, r9, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x210012, &(0x7f0000000400)={[{@fat=@debug}, {@nodots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0xd}}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@nocase}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {}, {}, {@fat=@fmask={'fmask', 0x3d, 0x80000008}}, {@fat=@usefree}, {@fat=@discard}, {@fat=@check_strict}]}, 0x0, 0x1c5, &(0x7f00000008c0)="$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") ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461"], 0xc4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x974, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d3, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x2, 0x10000, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000041, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.325536892s ago: executing program 4 (id=473): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff7c00000000000000400000000000000000000000000000000700"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010300003218298a000002000000000000001a00000005001300090000005bce7f69c0ea"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x48) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0x0, 0x4, 0x5, 0x0, 0x3, 0xfffffffffffffffd}) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x32) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000018c0), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) 1.293170734s ago: executing program 4 (id=474): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kfree\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000031007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x1, &(0x7f0000000040)={0x0, 0x1, 0x800000000004}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = epoll_create1(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r8, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7a, r8}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r6, &(0x7f0000000580)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x7}) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.242449656s ago: executing program 1 (id=475): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1808000000000000000000000200000085000000000000000b020000", @ANYRES16=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x3, 0xe8, &(0x7f00000006c0)=""/232}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x14, 0x30, 0x100, 0x5, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='mm_collapse_huge_page_swapin\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x80000, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x2200, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, 0x0, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000007c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_clone3(&(0x7f0000000640)={0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000480), {0x19}, &(0x7f0000000500)=""/27, 0x1b, &(0x7f0000000580)=""/65, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0x7}, {0x6, 0x60}]}) 1.200387528s ago: executing program 0 (id=476): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) unshare(0x22020400) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000340)={0x5, {{0xa, 0xf, 0x6, @mcast1, 0x1ff}}, {{0xa, 0x4e23, 0xae, @mcast2, 0x6}}}, 0x108) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r7, 0x351e, 0x483, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="9800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000200)=0x8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x93, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@gettfilter={0x34, 0x2e, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x3, 0xffe0}, {0xd, 0x4}, {0xa, 0xc}}, [{0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r13, 0x4, 0xdf, 0xd, 0x0, 0x5f, @mcast2, @mcast2, 0x8000, 0x2f00, 0xfffffffe, 0xc6}}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x28, r15, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x28}}, 0x2000c050) 1.14811415s ago: executing program 4 (id=477): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a0000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r5, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r4, r5, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) socket$unix(0x1, 0x1, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) 1.125600131s ago: executing program 0 (id=478): r0 = socket(0x8000000010, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0xfffffffffffffff9, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000180)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2d1, &(0x7f0000000c80)="$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") r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000c00)='./file2\x00', 0x20000502) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101601, 0x119) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 1.106255282s ago: executing program 3 (id=479): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x105530, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) r4 = socket(0x1e, 0x80004, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) write$tun(r6, 0x0, 0x0) r7 = io_uring_setup(0x4cd2, &(0x7f0000000180)={0x0, 0x782d, 0x12e01, 0x3, 0x96}) io_uring_enter(r7, 0x3983, 0x9e1, 0xc, &(0x7f00000000c0), 0x8) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x18001, 0x0) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r10, 0xffffffff80000502, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000000000050000000200000002000000", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0000000003000000020000000500"/28], 0x50) r11 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r14 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_redirect(r14, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) 1.082618183s ago: executing program 4 (id=480): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x1b) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x10fc, 0x30, 0x12f, 0x0, 0x0, {}, [{0x10e8, 0x1, [@m_police={0x10e4, 0x1, 0x0, 0x0, {{0xb}, {0x10b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x1, 0x8, 0xe84, 0x7fff, 0x6, 0x4, 0x0, 0x4c, 0xac9, 0x7fff, 0x8, 0x2, 0x7fffffff, 0x9, 0x6, 0x6, 0x7fff, 0xfffffe00, 0xad, 0x92c, 0x6, 0x9c6, 0x401, 0x85c, 0x4, 0x772, 0x7f1e, 0x5, 0x10000, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0x7, 0x2, 0x7f, 0x1000, 0x7, 0x81, 0x7fff, 0x4, 0x81, 0x2, 0x7, 0x79, 0x3, 0x1, 0x2, 0xf8f1, 0x62, 0x6, 0x64e, 0x6, 0x9, 0x9, 0x7, 0x40, 0x6, 0xfffffffb, 0xd5, 0xf8, 0x0, 0x8, 0x3, 0x7, 0x100, 0x9, 0x7, 0x0, 0x2, 0x9, 0xb79, 0x6, 0x6, 0x7, 0x8, 0xffffffff, 0x7, 0xffff, 0xe, 0xfffffffe, 0x3, 0x7, 0x8, 0xfff, 0x3, 0x1, 0xffffffff, 0x3, 0x7f, 0x7, 0x4, 0x7f, 0x8, 0x9, 0x8, 0x4, 0x4, 0x5, 0x9, 0x0, 0x32e, 0xde41, 0x0, 0x100, 0x5, 0xef835bd0, 0x7, 0x3, 0x61b, 0x9, 0x4, 0xa, 0xe9, 0x2, 0x8, 0x7, 0x9, 0x9, 0x1000, 0x5, 0x2, 0x9, 0x4, 0x7, 0xc, 0xffffffff, 0x5, 0x4, 0x4, 0x8, 0x6, 0x0, 0x6, 0x7, 0x6e12, 0x1, 0x1, 0x9, 0x7, 0x3d, 0x200, 0xffffffff, 0x0, 0x7, 0x5, 0x9, 0x1, 0x2, 0x7, 0x9, 0xfffffffd, 0x9d, 0x10001, 0x9, 0xe, 0x1, 0x1b, 0xa0, 0x7fff, 0x0, 0x3, 0x1ff, 0x4, 0x100, 0x80000000, 0x3, 0x440, 0x7, 0x2, 0x39dd, 0x1, 0x9, 0xf92b, 0x3ff, 0x6ec52f90, 0x8, 0x1, 0x0, 0x7f, 0x69f, 0x3, 0x6, 0x1, 0x6, 0x1, 0xf6, 0x7, 0x5, 0xff, 0x9ad0, 0x0, 0x7d, 0x4, 0x552, 0x2, 0x7, 0xff, 0x9, 0x5, 0x40, 0x3, 0x1, 0x9, 0xffff, 0x2, 0x8000, 0x3, 0x5, 0x7, 0x7, 0x3, 0x0, 0x7, 0x81, 0x800, 0x9, 0x2, 0x3, 0xd, 0x80000001, 0x3e, 0x9, 0x7fffffff, 0x5, 0x98bb, 0xfffffffc, 0x6, 0xfffffffc, 0x1, 0x5, 0x400, 0xfffffff7, 0x3, 0x7fff, 0x8, 0x5, 0x5, 0x800, 0x8, 0xfffffffc, 0x5, 0xff, 0xba7f, 0x6, 0x5, 0x1, 0x3, 0x5, 0x7, 0xfd2, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x94}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0xd, 0x1, 0x2, {0xa8, 0x1, 0xd12, 0x7ff, 0x2, 0x697e}, {0x4, 0x1, 0x66b, 0x9d22, 0x1460, 0x7df4}, 0x5, 0x2, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x7, 0xf690, 0x2, 0x4, 0xfffffffc, 0x0, 0x8000, 0x0, 0x1, 0x7, 0x200, 0x4, 0xc, 0xd, 0x9, 0x400, 0x2, 0x3, 0x80000000, 0xc8, 0x7, 0x6df9, 0xfd, 0x9, 0x8, 0x9, 0x3, 0x101, 0xff, 0x7, 0xffff, 0x91e, 0x8, 0xc, 0x2, 0x91e, 0x6, 0x2, 0x401, 0x1, 0x7e2613e9, 0x1000, 0x605402fb, 0x7e, 0x263, 0xffffffff, 0x9, 0x2, 0x10001, 0x6, 0x80000000, 0x62, 0x0, 0x5, 0xd, 0xe7, 0x10, 0x8, 0x7fff, 0x4, 0x55, 0x1, 0xc0, 0x2, 0x5, 0xcf05, 0x9, 0x4, 0x9, 0xffffffff, 0x80000001, 0x1ff, 0x8, 0x6, 0x3, 0x2, 0x81, 0x5, 0x22, 0x8, 0x5, 0x6, 0x3, 0x7, 0x60156675, 0xf, 0x1000, 0x7, 0xfffffff8, 0xb, 0x0, 0x5b45, 0x101, 0x6, 0x6, 0x1, 0x3, 0x0, 0x2, 0x1000, 0xffffffff, 0x6, 0x4, 0x10000, 0x4, 0x336, 0x3, 0x9, 0xc, 0x5, 0x0, 0x6, 0x3, 0x1, 0x7, 0x8, 0xfffffffc, 0x8, 0x7fffffff, 0x7, 0x3, 0xfffffff7, 0x6745338b, 0xe26, 0x4, 0x400, 0xa, 0x1, 0xd82, 0x6, 0x180, 0x5, 0x5, 0xda0, 0x7, 0x1, 0x2, 0xce, 0x5, 0x2, 0x27, 0x4, 0x3, 0xff, 0x8, 0xfffffeff, 0x2, 0xff, 0x1, 0x8e2, 0x2, 0x9, 0x95c9, 0x0, 0x1, 0x583c, 0x1, 0x3, 0x9, 0xc, 0x1ff, 0x60000, 0x80, 0xa, 0x8, 0x8, 0x9, 0x1, 0x6, 0xaea, 0xe493, 0x3, 0x7, 0x0, 0x0, 0x498, 0xffff8001, 0x2, 0x1000, 0x8, 0xea, 0x800, 0xbb, 0x6ed901c9, 0x700, 0x8000, 0x81, 0x0, 0xc, 0x7, 0x8, 0x857, 0x7f, 0x1, 0x0, 0x6, 0x6, 0x1, 0x1, 0x3, 0x2, 0x5, 0x81, 0x3, 0x6, 0x4, 0x1, 0x0, 0x9, 0x1000, 0x4, 0x101, 0x1, 0x1, 0x9, 0x4, 0x9, 0x0, 0x0, 0x4, 0xbe359504, 0x81, 0x400, 0x2, 0x3a, 0x3ff, 0x9, 0xa0, 0x9, 0x3, 0x1000000, 0x81, 0x5, 0x5, 0x707f, 0xfffffffa, 0x5, 0x3, 0x9, 0xe, 0x2, 0xfffffff9, 0x4, 0x8, 0x1, 0xfffffff7, 0x16f, 0xff, 0xed9, 0x6, 0x3, 0x0, 0x9, 0x1, 0x8001]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x10fc}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xffffffffffffffff}, 0xffffffe5) keyctl$search(0xa, 0x0, &(0x7f0000000400)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 956.506608ms ago: executing program 5 (id=481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x300, 0x0, 0xff, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x300, 0x0, 0xff, 0xb, 0x8006, 0x12}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) sendfile(r2, r4, &(0x7f0000000140)=0x400, 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r1], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRES64=r0], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000840)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000fdff0300000000008bc9f19e96e886d083037ea96920ff0a4be0c6a924a253466c550669af9e2198b64ae6e42a9253a8c67680a5b7523b4fefcc870ab1fe326725203971a2462d05eeec319c74cec16cbb8696ceb115e4497d265e96ede7ea0103c25fc2029532d12d564efbae514221e0a3024abadb22ac5716a9cad68ac40ff7c57cc949d206dcf5d4b56cb121a07b893e78dea51e524d7941427c70efaeb312f6f177799c21e3b84ccb6872435e00000000d5ab9cc14ac270793d3a47804aa49d", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r10, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x1, 0x12004000, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) 602.503864ms ago: executing program 5 (id=484): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001300)={0xa, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0xffffffffffffffff, r3, 'id0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES64=r7], 0x310) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000340), &(0x7f0000000300)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r10}, 0x18) 578.170395ms ago: executing program 5 (id=485): epoll_create1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0xa4000021) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0xb25, {{0x2a, 0x4, 0x3, 0x4, 0xa8, 0x66, 0x0, 0x9f, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x7f, [@multicast2, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x8c, 0x0, 0x5, [0x96, 0x7]}, @timestamp={0x44, 0x18, 0x96, 0x0, 0x7, [0x1, 0x80, 0x0, 0x200, 0x3307941b]}, @ssrr={0x89, 0x17, 0x60, [@multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x9, [{@broadcast, 0x10000000}, {@multicast2}]}, @rr={0x7, 0x3, 0x42}, @rr={0x7, 0xf, 0x30, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xf, 0x15, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x2, 0x2, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x64, 0x0, 0xf7, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x6, 0x1}, @generic={0x94, 0x7, "e9a4e23099"}, @end]}}}}}) getpeername$packet(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 577.564475ms ago: executing program 3 (id=486): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r0, 0x0, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) pipe2(&(0x7f0000000080), 0x0) sendto$inet(r0, &(0x7f0000000b00)="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", 0x24f, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0xae8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES64], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) clock_settime(0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000580)={r1, 0x0, 0x33, 0x0, &(0x7f0000000340)="eb7ac722699228e449e4d03871ca2ea6005caac924d0b400dcc3bc7bb37f0cb0d38d1c7a3cc2c1aeb66bfc574d5130594ad7ecda79f9e9ecf1dccb44a47124ae23a677cb081b30e1ab35a6baafd4b58081a889cc907a4dcb8403944e869daf165d6bc000"/110, 0x0, 0xd1d, 0x0, 0xa4, 0x0, &(0x7f0000000d80)="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"/477, 0x0, 0x2, 0x0, 0x58d7}, 0x50) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 536.661277ms ago: executing program 1 (id=487): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1801878f8ce0bac7e64f346bce80000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c4600070284ff7f0000000000000300060003000000a400000038000000aa00000007000000a70b2000010026840400000800000000030000000700000000000000ff070000c300000000020000020000000d000000"], 0x58) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) getsockname(r2, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000040)=0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xcc, &(0x7f00000001c0)={@link_local, @random="50a241d5cde0", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "fbb2ea", 0x0, 0x33, 0xff, @rand_addr=' \x01\x00', @mcast2}}}}, 0x0) 300.636397ms ago: executing program 1 (id=488): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff7c00000000000000400000000000000000000000000000000700"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010300003218298a000002000000000000001a00000005001300090000005bce7f69c0ea"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x48) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0x0, 0x4, 0x5, 0x0, 0x3, 0xfffffffffffffffd}) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x32) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000018c0), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) 220.86394ms ago: executing program 5 (id=489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYRES16=r3], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0x4, r8, 0x30, r6}, 0x10) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r9, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000400)="d2ff03076003008cb89e08f086dd05536a601e52894858cf5fc7f65492b74365131466624be7053f664dc20d6b7be27e2994e1f9e95c", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) dup3(r0, r9, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002d00)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0xa, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0xfffffff9, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d8, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0xc00, 0x23e, 0x10000, 0xfffffffe}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) 189.787722ms ago: executing program 1 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000040)=0x7) r11 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, r1, &(0x7f0000000c40)={r11, r3, 0x5}) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x64040011, 0x1}) r12 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x64041}, 0x40000) ioctl$sock_inet_SIOCGARP(r12, 0x8954, &(0x7f0000000c80)={{0x2, 0x4e22, @empty}, {0x1, @local}, 0x30, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 'bridge_slave_0\x00'}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r13}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='xen_mc_entry_alloc\x00', r2, 0x0, 0x8000}, 0x18) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x2, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x7d}, @call={0x85, 0x0, 0x0, 0x7c}], &(0x7f00000003c0)='GPL\x00', 0x7ff, 0xee, &(0x7f0000000880)=""/238, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[r1, r1], &(0x7f0000000600)=[{0x5, 0x4, 0x2, 0x1}, {0x5, 0x4, 0xf, 0x5}, {0x1, 0x1, 0xc, 0x5}, {0x0, 0x2, 0xc, 0x5}, {0x1, 0x3, 0x8, 0x5}], 0x10, 0xc}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@ifindex, 0x2e, 0x1, 0x10, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x81, 0x2, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x20, 0xfffffff7, 0x6}}) r17 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c00), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=r16, @ANYRES32=r14, @ANYBLOB="8f00000000000100", @ANYRES32=r0, @ANYRES32=r17, @ANYBLOB, @ANYRES64=r15], 0x20) 141.608374ms ago: executing program 4 (id=491): r0 = shmat(0x0, &(0x7f0000a7a000/0x2000)=nil, 0x7000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffad}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000000)={0x3, 0x1, 0x1, 0x1f, 0xf9, &(0x7f0000000580)}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x199443, 0x14) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x602600, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 0s ago: executing program 5 (id=492): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x0) unshare(0x28000600) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x3502, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x80000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket(0x400000000010, 0x3, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x38}, 0x48, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r8, r7, r7, 0x0) keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): 03e syscall=39 compat=0 ip=0x7f61f0c565e7 code=0x7ffc0000 [ 50.268152][ T29] audit: type=1326 audit(1765069057.648:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4047 comm="syz.0.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61f0bfb829 code=0x7ffc0000 [ 50.321319][ T4058] infiniband !yz!: set active [ 50.374258][ T4061] vfat: Unknown parameter '' [ 50.378385][ T4058] infiniband !yz!: added team_slave_0 [ 50.399283][ T4058] RDS/IB: !yz!: added [ 50.403361][ T4058] smc: adding ib device !yz! with port count 1 [ 50.473344][ T4058] smc: ib device !yz! port 1 has no pnetid [ 50.507419][ T4069] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.138'. [ 50.530926][ T4069] netlink: zone id is out of range [ 50.536075][ T4069] netlink: zone id is out of range [ 50.574485][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.581064][ T4068] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.140: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 50.587556][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.607434][ T4068] EXT4-fs (loop1): Remounting filesystem read-only [ 50.607480][ T4069] netlink: zone id is out of range [ 50.619179][ T4069] netlink: zone id is out of range [ 50.624388][ T4069] netlink: zone id is out of range [ 50.629519][ T4069] netlink: zone id is out of range [ 50.634619][ T4069] netlink: zone id is out of range [ 50.640186][ T4069] netlink: zone id is out of range [ 50.645310][ T4069] netlink: zone id is out of range [ 50.650528][ T4069] netlink: zone id is out of range [ 50.814738][ T3491] !yz!: Port: 1 Link DOWN [ 50.827795][ T4071] netlink: 'syz.1.140': attribute type 12 has an invalid length. [ 50.836343][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.854803][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.869592][ T4065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34280 sclass=netlink_route_socket pid=4065 comm=syz.0.138 [ 50.889374][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.919353][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 50.925857][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.980187][ T4080] set_capacity_and_notify: 12 callbacks suppressed [ 50.980213][ T4080] loop2: detected capacity change from 0 to 1024 [ 50.995785][ T4080] EXT4-fs: Ignoring removed bh option [ 51.008501][ T4080] EXT4-fs: inline encryption not supported [ 51.029855][ T4080] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.080873][ T4080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.100332][ T4080] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.142: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.163101][ T4080] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.142: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.217011][ T4080] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.142: Failed to acquire dquot type 0 [ 51.261065][ T4087] loop0: detected capacity change from 0 to 4096 [ 51.268005][ T4087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.280094][ T4080] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 51.425244][ T4080] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.142: mark_inode_dirty error [ 51.505224][ T4090] netlink: 'syz.0.144': attribute type 6 has an invalid length. [ 51.564977][ T4080] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 51.621133][ T4080] EXT4-fs (loop2): 1 orphan inode deleted [ 51.634964][ T125] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.651228][ T4093] loop3: detected capacity change from 0 to 1024 [ 51.661290][ T4093] EXT4-fs: Ignoring removed bh option [ 51.668131][ T4093] EXT4-fs: inline encryption not supported [ 51.672597][ T125] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 51.687010][ T4093] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.705696][ T4080] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.142: Invalid inode table block 1 in block_group 0 [ 51.729820][ T4093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.738448][ T4080] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 51.753546][ T4093] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.145: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.767900][ T4093] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.145: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.782297][ T4093] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.145: Failed to acquire dquot type 0 [ 51.796720][ T4093] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 51.806579][ T4093] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.145: mark_inode_dirty error [ 51.817970][ T4093] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 51.828655][ T4093] EXT4-fs (loop3): 1 orphan inode deleted [ 51.837288][ T4080] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.142: mark_inode_dirty error [ 51.849365][ T125] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.867489][ T125] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 51.919493][ T4096] caif0: entered promiscuous mode [ 51.924561][ T4096] caif0: entered allmulticast mode [ 51.936919][ T4093] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.145: Invalid inode table block 1 in block_group 0 [ 51.961862][ T4093] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 51.979370][ T4093] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.145: mark_inode_dirty error [ 52.075728][ T4105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 52.084588][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 52.111265][ T4111] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 52.120888][ T4105] sit0: Master is either lo or non-ether device [ 52.130012][ T4110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.148'. [ 52.138897][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 52.147796][ T4110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.148'. [ 52.159409][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 52.167893][ T4108] netlink: 96 bytes leftover after parsing attributes in process `syz.3.150'. [ 52.182620][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 52.505964][ T4127] loop3: detected capacity change from 0 to 8192 [ 52.645435][ T4110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.148'. [ 52.654358][ T4110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'. [ 53.205697][ T4172] 9pnet_fd: Insufficient options for proto=fd [ 53.230380][ T4172] netlink: 'syz.2.154': attribute type 10 has an invalid length. [ 53.239897][ T4166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.259172][ T4175] loop0: detected capacity change from 0 to 512 [ 53.306425][ T4175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.351634][ T4172] team0: Failed to send options change via netlink (err -105) [ 53.359149][ T4172] team0: Port device dummy0 added [ 53.365714][ T4175] EXT4-fs (loop0): 1 truncate cleaned up [ 53.460884][ T4166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.581457][ T4166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.823326][ T4166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.285270][ T2657] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.350983][ T2657] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.369826][ T2657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.379098][ T4205] loop1: detected capacity change from 0 to 512 [ 54.400353][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.415659][ T4206] loop2: detected capacity change from 0 to 1024 [ 54.417537][ T4205] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.430040][ T4205] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 54.433801][ T4206] EXT4-fs: Ignoring removed bh option [ 54.443609][ T4205] System zones: 0-1, 15-15, 18-18, 34-34 [ 54.453895][ T4206] EXT4-fs: inline encryption not supported [ 54.470925][ T4205] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.477319][ T4205] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.482414][ T4210] loop0: detected capacity change from 0 to 128 [ 54.491872][ T4205] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 54.509519][ T4206] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.521072][ T4205] EXT4-fs (loop1): 1 truncate cleaned up [ 54.533554][ T4206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 54.569787][ T4206] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.160: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.601952][ T4206] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.160: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.634032][ T4215] loop3: detected capacity change from 0 to 2048 [ 54.659341][ T4206] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.160: Failed to acquire dquot type 0 [ 54.700985][ T4215] netlink: 'syz.3.163': attribute type 3 has an invalid length. [ 54.706950][ T4219] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.706968][ T4219] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 54.719996][ T4206] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 54.720141][ T4206] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.160: mark_inode_dirty error [ 54.720266][ T4206] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 54.720378][ T4206] EXT4-fs (loop2): 1 orphan inode deleted [ 54.723667][ T4220] loop4: detected capacity change from 0 to 164 [ 54.723999][ T2657] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.724108][ T2657] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 54.729814][ T4206] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.160: Invalid inode table block 1 in block_group 0 [ 54.754090][ T4220] syz.4.162: attempt to access beyond end of device [ 54.754090][ T4220] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 54.789422][ T4206] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 54.809599][ T4220] syz.4.162: attempt to access beyond end of device [ 54.809599][ T4220] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 54.826842][ T4221] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.874025][ T4221] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1000 with error 28 [ 54.887193][ T4206] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.160: mark_inode_dirty error [ 54.899262][ T4221] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.899262][ T4221] [ 54.899277][ T4221] EXT4-fs (loop3): Total free blocks count 0 [ 54.899290][ T4221] EXT4-fs (loop3): Free/Dirty block details [ 54.931965][ T4221] EXT4-fs (loop3): free_blocks=2415919104 [ 54.932039][ T4221] EXT4-fs (loop3): dirty_blocks=1008 [ 54.932075][ T4221] EXT4-fs (loop3): Block reservation details [ 54.932085][ T4221] EXT4-fs (loop3): i_reserved_data_blocks=63 [ 55.092150][ T4229] EXT4-fs (loop1): orphan cleanup on readonly fs [ 55.102446][ T125] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 55.109656][ T4229] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.166: ea_inode file size=4 entry size=6 [ 55.114706][ T125] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.114706][ T125] [ 55.127380][ T29] kauditd_printk_skb: 822 callbacks suppressed [ 55.127391][ T29] audit: type=1326 audit(2000000003.060:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61f0c565e7 code=0x7ffc0000 [ 55.140317][ T4229] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.163555][ T29] audit: type=1326 audit(2000000003.070:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f0c92005 code=0x7ffc0000 [ 55.167461][ T4229] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.166: corrupted inode contents [ 55.179253][ T29] audit: type=1326 audit(2000000003.070:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61f0bfb829 code=0x7ffc0000 [ 55.213436][ T4229] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.166: mark_inode_dirty error [ 55.214299][ T29] audit: type=1326 audit(2000000003.070:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f61f0c565e7 code=0x7ffc0000 [ 55.238234][ T4229] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.166: corrupted inode contents [ 55.248667][ T29] audit: type=1326 audit(2000000003.070:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f61f0bfb829 code=0x7ffc0000 [ 55.248689][ T29] audit: type=1326 audit(2000000003.070:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f61f0c5f749 code=0x7ffc0000 [ 55.248708][ T29] audit: type=1326 audit(2000000003.070:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f0c92005 code=0x7ffc0000 [ 55.284076][ T4229] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.166: mark_inode_dirty error [ 55.306823][ T29] audit: type=1326 audit(2000000003.070:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f0c92005 code=0x7ffc0000 [ 55.306849][ T29] audit: type=1326 audit(2000000003.070:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f0c92005 code=0x7ffc0000 [ 55.359709][ T4229] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.166: mark inode dirty (error -117) [ 55.365359][ T29] audit: type=1326 audit(2000000003.070:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4209 comm="syz.0.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61f0c92005 code=0x7ffc0000 [ 55.419417][ T4229] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 55.487477][ T4229] EXT4-fs (loop1): 1 orphan inode deleted [ 55.509565][ T4244] EXT4-fs: Ignoring removed nobh option [ 55.515266][ T4244] EXT4-fs: Ignoring removed bh option [ 55.890949][ T4254] veth2: entered promiscuous mode [ 55.896025][ T4254] veth2: entered allmulticast mode [ 55.947666][ T4251] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.963501][ T4251] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 55.964928][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.976032][ T4251] EXT4-fs (loop0): This should not happen!! Data will be lost [ 55.976032][ T4251] [ 55.992635][ T4251] EXT4-fs (loop0): Total free blocks count 0 [ 55.998607][ T4251] EXT4-fs (loop0): Free/Dirty block details [ 56.004523][ T4251] EXT4-fs (loop0): free_blocks=2415919104 [ 56.010259][ T4251] EXT4-fs (loop0): dirty_blocks=3776 [ 56.015675][ T4251] EXT4-fs (loop0): Block reservation details [ 56.021694][ T4251] EXT4-fs (loop0): i_reserved_data_blocks=236 [ 56.161279][ T4264] 9pnet_fd: Insufficient options for proto=fd [ 56.180798][ T4264] netlink: 'syz.4.171': attribute type 10 has an invalid length. [ 56.218486][ T4264] team0: Failed to send options change via netlink (err -105) [ 56.226063][ T4264] team0: Port device dummy0 added [ 56.416552][ T4269] tipc: Started in network mode [ 56.421501][ T4269] tipc: Node identity 4, cluster identity 4711 [ 56.427658][ T4269] tipc: Node number set to 4 [ 56.757620][ T125] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1818 with error 28 [ 56.770197][ T125] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.770197][ T125] [ 56.895662][ T4282] smc: net device bond0 applied user defined pnetid SYZ0 [ 57.051347][ T4304] set_capacity_and_notify: 4 callbacks suppressed [ 57.051361][ T4304] loop4: detected capacity change from 0 to 8192 [ 57.064946][ T4306] netlink: 'syz.0.187': attribute type 12 has an invalid length. [ 57.093653][ T4304] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.104714][ T4301] loop0: detected capacity change from 0 to 2048 [ 57.125730][ T4301] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.187: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 57.142154][ T4304] __nla_validate_parse: 6 callbacks suppressed [ 57.142167][ T4304] netlink: 96 bytes leftover after parsing attributes in process `syz.4.178'. [ 57.172173][ T4301] EXT4-fs (loop0): Remounting filesystem read-only [ 57.222344][ T4313] netlink: 224 bytes leftover after parsing attributes in process `syz.0.180'. [ 57.254285][ T4313] loop0: detected capacity change from 0 to 512 [ 57.262105][ T4313] EXT4-fs: Ignoring removed i_version option [ 57.268165][ T4313] EXT4-fs: Ignoring removed bh option [ 57.296296][ T4313] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.352734][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 57.361732][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.369345][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.508599][ T4311] net_ratelimit: 43 callbacks suppressed [ 57.508613][ T4311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.642455][ T4325] loop2: detected capacity change from 0 to 8192 [ 57.650833][ T4329] loop4: detected capacity change from 0 to 1024 [ 57.657983][ T4329] EXT4-fs: Ignoring removed bh option [ 57.663635][ T4329] EXT4-fs: inline encryption not supported [ 57.679812][ T4329] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.701481][ T4329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 57.713258][ T4329] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.184: lblock 2 mapped to illegal pblock 2 (length 1) [ 57.728257][ T4329] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.184: lblock 0 mapped to illegal pblock 48 (length 1) [ 57.743112][ T4329] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.184: Failed to acquire dquot type 0 [ 57.745818][ T4334] netlink: 'syz.0.185': attribute type 12 has an invalid length. [ 57.762524][ T4329] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 57.773006][ T4329] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.184: mark_inode_dirty error [ 57.834991][ T4329] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 57.848314][ T4336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 57.868120][ T4332] loop0: detected capacity change from 0 to 2048 [ 57.875613][ T4329] EXT4-fs (loop4): 1 orphan inode deleted [ 57.875828][ C0] Illegal XDP return value 16128 on prog (id 171) dev bond_slave_1, expect packet loss! [ 57.892000][ T125] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.920770][ T125] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 57.946350][ T4329] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.184: Invalid inode table block 1 in block_group 0 [ 57.968154][ T4329] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 57.969424][ T4332] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.185: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 57.989752][ T4329] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.184: mark_inode_dirty error [ 58.053651][ T4339] 9pnet_fd: Insufficient options for proto=fd [ 58.059298][ T4332] EXT4-fs (loop0): Remounting filesystem read-only [ 58.066528][ T4339] loop1: detected capacity change from 0 to 512 [ 58.086938][ T4339] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.186: EA inode hash validation failed [ 58.119680][ T4339] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.139396][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.186: corrupted inode contents [ 58.169317][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.188'. [ 58.178101][ T4345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 58.187075][ T4345] sit0: Master is either lo or non-ether device [ 58.198375][ T4339] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.186: mark_inode_dirty error [ 58.210229][ T4339] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.186: corrupted inode contents [ 58.222299][ T4339] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #15: comm syz.1.186: mark_inode_dirty error [ 58.234606][ T4339] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #15: comm syz.1.186: mark inode dirty (error -117) [ 58.247705][ T4339] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 58.256953][ T4339] EXT4-fs (loop1): 1 orphan inode deleted [ 58.450900][ T4348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.464268][ T4349] loop0: detected capacity change from 0 to 8192 [ 58.475754][ T4350] loop1: detected capacity change from 0 to 512 [ 58.498384][ T4350] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.532778][ T4350] EXT4-fs (loop1): 1 truncate cleaned up [ 58.538450][ T4352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 58.597146][ T4352] loop3: detected capacity change from 0 to 2048 [ 58.647966][ T4348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.680990][ T4352] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.693424][ T4358] EXT4-fs: Ignoring removed orlov option [ 58.780943][ T4348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.888356][ T4348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.919434][ T125] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 58.942217][ T125] EXT4-fs (loop3): Remounting filesystem read-only [ 59.025914][ T1665] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.057990][ T1665] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.119354][ T1665] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.131558][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.214432][ T4371] EXT4-fs: Ignoring removed orlov option [ 59.268728][ T4371] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 59.296460][ T4376] batadv_slave_1: entered promiscuous mode [ 59.302764][ T4374] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.337397][ T4374] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 59.357806][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 59.366392][ T4383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 59.367236][ T4371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 59.373079][ T4383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.373178][ T4383] vhci_hcd vhci_hcd.0: Device attached [ 59.389400][ T4374] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.195: bg 0: block 248: padding at end of block bitmap is not set [ 59.389676][ T4374] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.195: Failed to acquire dquot type 1 [ 59.428212][ T4374] EXT4-fs (loop2): 1 truncate cleaned up [ 59.451803][ T4374] tipc: Started in network mode [ 59.456690][ T4374] tipc: Node identity 4, cluster identity 4711 [ 59.462894][ T4374] tipc: Node number set to 4 [ 59.479460][ T4374] syz.2.195 (4374) used greatest stack depth: 8944 bytes left [ 59.559414][ T3523] vhci_hcd: vhci_device speed not set [ 59.633536][ T3523] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 59.727760][ T4385] vhci_hcd: connection reset by peer [ 59.742690][ T52] vhci_hcd: stop threads [ 59.746950][ T52] vhci_hcd: release socket [ 59.751398][ T52] vhci_hcd: disconnect device [ 59.793864][ T4407] veth2: entered promiscuous mode [ 59.798918][ T4407] veth2: entered allmulticast mode [ 59.849959][ T4401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.868002][ T4401] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1540 with error 28 [ 59.880552][ T4401] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.880552][ T4401] [ 59.890211][ T4401] EXT4-fs (loop3): Total free blocks count 0 [ 59.896190][ T4401] EXT4-fs (loop3): Free/Dirty block details [ 59.902147][ T4401] EXT4-fs (loop3): free_blocks=2415919104 [ 59.907867][ T4401] EXT4-fs (loop3): dirty_blocks=1552 [ 59.913163][ T4401] EXT4-fs (loop3): Block reservation details [ 59.919127][ T4401] EXT4-fs (loop3): i_reserved_data_blocks=97 [ 59.982845][ T4410] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.202: iget: bad extra_isize 90 (inode size 256) [ 60.009307][ T4413] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.020315][ T4413] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.036957][ T4413] JBD2: no valid journal superblock found [ 60.042784][ T4413] EXT4-fs (loop2): Could not load journal inode [ 60.083758][ T4410] EXT4-fs (loop0): Remounting filesystem read-only [ 60.090655][ T4410] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 60.100146][ T4410] EXT4-fs (loop0): 1 orphan inode deleted [ 60.140024][ T4375] batadv_slave_1: left promiscuous mode [ 60.173744][ T29] kauditd_printk_skb: 924 callbacks suppressed [ 60.173758][ T29] audit: type=1326 audit(2000000001.971:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.224642][ T29] audit: type=1326 audit(2000000001.971:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.248242][ T29] audit: type=1326 audit(2000000001.971:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.271589][ T29] audit: type=1326 audit(2000000001.971:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.295050][ T29] audit: type=1326 audit(2000000001.971:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.318541][ T29] audit: type=1326 audit(2000000001.971:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.341814][ T29] audit: type=1400 audit(2000000001.971:7112): avc: denied { ioctl } for pid=4415 comm="syz.1.204" path="socket:[8714]" dev="sockfs" ino=8714 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.366334][ T29] audit: type=1326 audit(2000000001.971:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.389650][ T29] audit: type=1326 audit(2000000001.971:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.412902][ T29] audit: type=1326 audit(2000000001.971:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 60.466697][ T125] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.481206][ T125] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1540 with error 28 [ 60.494065][ T125] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.494065][ T125] [ 60.533657][ T4423] EXT4-fs: Ignoring removed bh option [ 60.539094][ T4423] EXT4-fs: inline encryption not supported [ 60.555076][ T4426] lo speed is unknown, defaulting to 1000 [ 60.563377][ T4426] lo speed is unknown, defaulting to 1000 [ 60.569263][ T4426] lo speed is unknown, defaulting to 1000 [ 60.582941][ T4423] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.591582][ T4426] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.602398][ T4423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 60.645895][ T4423] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.208: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.660358][ T4423] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.208: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.674741][ T4423] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.208: Failed to acquire dquot type 0 [ 60.686900][ T4423] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.693511][ T4426] lo speed is unknown, defaulting to 1000 [ 60.703576][ T4423] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.208: mark_inode_dirty error [ 60.748706][ T4434] EXT4-fs: Ignoring removed bh option [ 60.754289][ T4434] EXT4-fs: inline encryption not supported [ 60.766505][ T4423] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 60.777243][ T4426] lo speed is unknown, defaulting to 1000 [ 60.777338][ T4434] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.783347][ T4426] lo speed is unknown, defaulting to 1000 [ 60.800271][ T4423] EXT4-fs (loop4): 1 orphan inode deleted [ 60.806791][ T4434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 60.816985][ T4432] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.819895][ T31] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.828971][ T4434] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.210: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.842447][ T4423] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.208: Invalid inode table block 1 in block_group 0 [ 60.855840][ T4426] lo speed is unknown, defaulting to 1000 [ 60.876611][ T4434] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.210: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.877918][ T4426] lo speed is unknown, defaulting to 1000 [ 60.891430][ T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 60.905608][ T4434] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.210: Failed to acquire dquot type 0 [ 60.920027][ T4423] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.932176][ T4434] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 60.942055][ T4423] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.208: mark_inode_dirty error [ 60.942291][ T4434] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.210: mark_inode_dirty error [ 60.980685][ T4434] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 60.991396][ T4434] EXT4-fs (loop1): 1 orphan inode deleted [ 61.000612][ T52] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.016886][ T4432] netlink: 96 bytes leftover after parsing attributes in process `syz.3.207'. [ 61.026611][ T52] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 61.040267][ T4434] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.210: Invalid inode table block 1 in block_group 0 [ 61.053191][ T4434] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.064655][ T4434] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.210: mark_inode_dirty error [ 61.071398][ T52] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm kworker/u8:3: Invalid inode table block 1 in block_group 0 [ 61.098773][ T4422] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.208: Invalid inode table block 1 in block_group 0 [ 61.131758][ T4422] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.160029][ T4422] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.208: mark_inode_dirty error [ 61.242482][ T4448] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.262827][ T4448] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.214: Allocating blocks 41-42 which overlap fs metadata [ 61.322465][ T4448] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.214: Allocating blocks 41-42 which overlap fs metadata [ 61.397249][ T4448] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.214: Failed to acquire dquot type 1 [ 61.429511][ T4448] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.459771][ T4461] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 61.494788][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.214: corrupted inode contents [ 61.496907][ T4466] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.216: iget: bad extra_isize 90 (inode size 256) [ 61.520279][ T4448] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.214: mark_inode_dirty error [ 61.520394][ T4466] EXT4-fs (loop3): Remounting filesystem read-only [ 61.538298][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.214: corrupted inode contents [ 61.538897][ T4466] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 61.559309][ T4466] EXT4-fs (loop3): 1 orphan inode deleted [ 61.577987][ T4448] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.214: mark_inode_dirty error [ 61.589410][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.214: corrupted inode contents [ 61.602897][ T4448] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 61.611756][ T4448] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.214: corrupted inode contents [ 61.624273][ T4448] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.214: mark_inode_dirty error [ 61.655020][ T4448] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 61.664278][ T4448] EXT4-fs (loop1): 1 truncate cleaned up [ 61.700553][ T4448] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.782875][ T4478] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 61.794990][ T4478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.807617][ T4478] bond1 (unregistering): Released all slaves [ 61.921497][ T4482] lo speed is unknown, defaulting to 1000 [ 61.972253][ T4493] 9pnet_fd: Insufficient options for proto=fd [ 62.000078][ T4493] netlink: 'syz.1.221': attribute type 10 has an invalid length. [ 62.042369][ T4492] EXT4-fs: Ignoring removed bh option [ 62.075071][ T4492] EXT4-fs: inline encryption not supported [ 62.081028][ T4493] team0: Failed to send options change via netlink (err -105) [ 62.088579][ T4493] team0: Port device dummy0 added [ 62.118879][ T4492] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.152081][ T4492] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 62.170858][ T4492] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.224: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.185316][ T4492] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.224: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.199893][ T4492] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.224: Failed to acquire dquot type 0 [ 62.211440][ T4492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 62.221239][ T4492] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.224: mark_inode_dirty error [ 62.232823][ T4492] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 62.243317][ T4492] EXT4-fs (loop3): 1 orphan inode deleted [ 62.251936][ T2657] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.266575][ T2657] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 62.281632][ T4492] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.224: Invalid inode table block 1 in block_group 0 [ 62.295824][ T4492] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 62.305457][ T4492] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.224: mark_inode_dirty error [ 62.465837][ T4481] syz.4.223 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 62.476515][ T4481] CPU: 0 UID: 0 PID: 4481 Comm: syz.4.223 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 62.476546][ T4481] Tainted: [W]=WARN [ 62.476552][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.476562][ T4481] Call Trace: [ 62.476641][ T4481] [ 62.476649][ T4481] __dump_stack+0x1d/0x30 [ 62.476672][ T4481] dump_stack_lvl+0xe8/0x140 [ 62.476692][ T4481] dump_stack+0x15/0x1b [ 62.476709][ T4481] dump_header+0x81/0x240 [ 62.476795][ T4481] oom_kill_process+0x295/0x350 [ 62.476821][ T4481] out_of_memory+0x97b/0xb80 [ 62.476879][ T4481] try_charge_memcg+0x610/0xa10 [ 62.476972][ T4481] charge_memcg+0x51/0xc0 [ 62.476997][ T4481] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 62.477029][ T4481] __read_swap_cache_async+0x17b/0x2d0 [ 62.477059][ T4481] swap_cluster_readahead+0x262/0x3c0 [ 62.477090][ T4481] swapin_readahead+0xde/0x820 [ 62.477185][ T4481] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 62.477208][ T4481] ? __rcu_read_unlock+0x34/0x70 [ 62.477258][ T4481] ? __rcu_read_unlock+0x4f/0x70 [ 62.477279][ T4481] ? swap_cache_get_folio+0x277/0x280 [ 62.477324][ T4481] do_swap_page+0x2b4/0x21e0 [ 62.477348][ T4481] ? css_rstat_updated+0xb7/0x240 [ 62.477394][ T4481] ? __pfx_default_wake_function+0x10/0x10 [ 62.477428][ T4481] handle_mm_fault+0x9d8/0x2c60 [ 62.477463][ T4481] do_user_addr_fault+0x630/0x1080 [ 62.477554][ T4481] exc_page_fault+0x62/0xa0 [ 62.477577][ T4481] asm_exc_page_fault+0x26/0x30 [ 62.477667][ T4481] RIP: 0033:0x7fdcd6091fb3 [ 62.477683][ T4481] Code: 0d 09 00 48 8d 3d 36 0d 09 00 e8 e8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 62.477698][ T4481] RSP: 002b:00007fff85ba19a8 EFLAGS: 00010293 [ 62.477756][ T4481] RAX: 00000000fffffffa RBX: 00007fdcd62b5fa0 RCX: 0000000000000000 [ 62.477769][ T4481] RDX: 00007fff85ba19c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.477814][ T4481] RBP: 00007fdcd62b7da0 R08: 000000000e9e680a R09: 7fffffffffffffff [ 62.477882][ T4481] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000f433 [ 62.477894][ T4481] R13: 00007fdcd62b6090 R14: ffffffffffffffff R15: 00007fff85ba1b00 [ 62.477913][ T4481] [ 62.647907][ T3583] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.651845][ T4481] memory: usage 307200kB, limit 307200kB, failcnt 284 [ 62.707753][ T4481] memory+swap: usage 308092kB, limit 9007199254740988kB, failcnt 0 [ 62.715746][ T4481] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 62.723073][ T4481] Memory cgroup stats for /syz4: [ 62.723607][ T4481] cache 0 [ 62.731485][ T4481] rss 0 [ 62.734289][ T4481] shmem 0 [ 62.737220][ T4481] mapped_file 0 [ 62.740661][ T4481] dirty 0 [ 62.743590][ T4481] writeback 4096 [ 62.747139][ T4481] workingset_refault_anon 50 [ 62.751793][ T4481] workingset_refault_file 27 [ 62.756389][ T4481] swap 913408 [ 62.759669][ T4481] swapcached 8192 [ 62.763335][ T4481] pgpgin 30453 [ 62.766705][ T4481] pgpgout 30451 [ 62.770164][ T4481] pgfault 33897 [ 62.773636][ T4481] pgmajfault 32 [ 62.777166][ T4481] inactive_anon 8192 [ 62.781043][ T4481] active_anon 0 [ 62.784501][ T4481] inactive_file 0 [ 62.788152][ T4481] active_file 0 [ 62.791594][ T4481] unevictable 0 [ 62.795036][ T4481] hierarchical_memory_limit 314572800 [ 62.800497][ T4481] hierarchical_memsw_limit 9223372036854771712 [ 62.806631][ T4481] total_cache 0 [ 62.810112][ T4481] total_rss 0 [ 62.813378][ T4481] total_shmem 0 [ 62.816820][ T4481] total_mapped_file 0 [ 62.820850][ T4481] total_dirty 0 [ 62.824289][ T4481] total_writeback 4096 [ 62.828349][ T4481] total_workingset_refault_anon 50 [ 62.833492][ T4481] total_workingset_refault_file 27 [ 62.838593][ T4481] total_swap 913408 [ 62.842416][ T4481] total_swapcached 8192 [ 62.846551][ T4481] total_pgpgin 30453 [ 62.850500][ T4481] total_pgpgout 30451 [ 62.854497][ T4481] total_pgfault 33897 [ 62.858462][ T4481] total_pgmajfault 32 [ 62.862464][ T4481] total_inactive_anon 8192 [ 62.866906][ T4481] total_active_anon 0 [ 62.870864][ T4481] total_inactive_file 0 [ 62.875084][ T4481] total_active_file 0 [ 62.879097][ T4481] total_unevictable 0 [ 62.883074][ T4481] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.179,pid=4323,uid=0 [ 62.897720][ T4481] Memory cgroup out of memory: Killed process 4323 (syz.4.179) total-vm:96016kB, anon-rss:1140kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 62.969660][ T4502] set_capacity_and_notify: 15 callbacks suppressed [ 62.969677][ T4502] loop3: detected capacity change from 0 to 1024 [ 63.039073][ T4483] syz.4.223 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 63.053047][ T4483] CPU: 1 UID: 0 PID: 4483 Comm: syz.4.223 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.053155][ T4483] Tainted: [W]=WARN [ 63.053162][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.053174][ T4483] Call Trace: [ 63.053180][ T4483] [ 63.053188][ T4483] __dump_stack+0x1d/0x30 [ 63.053210][ T4483] dump_stack_lvl+0xe8/0x140 [ 63.053229][ T4483] dump_stack+0x15/0x1b [ 63.053266][ T4483] dump_header+0x81/0x240 [ 63.053283][ T4483] oom_kill_process+0x295/0x350 [ 63.053302][ T4483] out_of_memory+0x97b/0xb80 [ 63.053334][ T4483] try_charge_memcg+0x610/0xa10 [ 63.053371][ T4483] obj_cgroup_charge_pages+0xa6/0x150 [ 63.053399][ T4483] __memcg_kmem_charge_page+0x9f/0x170 [ 63.053515][ T4483] __alloc_frozen_pages_noprof+0x18f/0x360 [ 63.053540][ T4483] alloc_pages_mpol+0xb3/0x260 [ 63.053564][ T4483] alloc_pages_noprof+0x90/0x130 [ 63.053652][ T4483] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 63.053685][ T4483] __kvmalloc_node_noprof+0x492/0x6b0 [ 63.053781][ T4483] ? ip_set_alloc+0x24/0x30 [ 63.053831][ T4483] ? ip_set_alloc+0x24/0x30 [ 63.053851][ T4483] ip_set_alloc+0x24/0x30 [ 63.053872][ T4483] hash_netiface_create+0x282/0x740 [ 63.053901][ T4483] ? __pfx_hash_netiface_create+0x10/0x10 [ 63.053959][ T4483] ip_set_create+0x3cc/0x970 [ 63.053989][ T4483] ? __nla_parse+0x40/0x60 [ 63.054011][ T4483] nfnetlink_rcv_msg+0x4c6/0x590 [ 63.054064][ T4483] netlink_rcv_skb+0x123/0x220 [ 63.054088][ T4483] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 63.054114][ T4483] nfnetlink_rcv+0x167/0x16c0 [ 63.054213][ T4483] ? kmem_cache_free+0xe3/0x3a0 [ 63.054239][ T4483] ? __kfree_skb+0x109/0x150 [ 63.054258][ T4483] ? nlmon_xmit+0x4f/0x60 [ 63.054321][ T4483] ? consume_skb+0x49/0x150 [ 63.054337][ T4483] ? nlmon_xmit+0x4f/0x60 [ 63.054356][ T4483] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 63.054382][ T4483] ? __dev_queue_xmit+0x138d/0x1ec0 [ 63.054450][ T4483] ? __dev_queue_xmit+0x148/0x1ec0 [ 63.054474][ T4483] ? ref_tracker_free+0x37d/0x3e0 [ 63.054502][ T4483] ? __netlink_deliver_tap+0x4dc/0x500 [ 63.054533][ T4483] netlink_unicast+0x5c0/0x690 [ 63.054557][ T4483] netlink_sendmsg+0x58b/0x6b0 [ 63.054700][ T4483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.054727][ T4483] __sock_sendmsg+0x145/0x180 [ 63.054753][ T4483] ____sys_sendmsg+0x31e/0x4a0 [ 63.054774][ T4483] ___sys_sendmsg+0x17b/0x1d0 [ 63.054843][ T4483] __x64_sys_sendmsg+0xd4/0x160 [ 63.054869][ T4483] x64_sys_call+0x17ba/0x3000 [ 63.054888][ T4483] do_syscall_64+0xd8/0x2a0 [ 63.054972][ T4483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.054994][ T4483] RIP: 0033:0x7fdcd605f749 [ 63.055009][ T4483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.055022][ T4483] RSP: 002b:00007fdcd4ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.055102][ T4483] RAX: ffffffffffffffda RBX: 00007fdcd62b5fa0 RCX: 00007fdcd605f749 [ 63.055112][ T4483] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 63.055122][ T4483] RBP: 00007fdcd60e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 63.055132][ T4483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.055142][ T4483] R13: 00007fdcd62b6038 R14: 00007fdcd62b5fa0 R15: 00007fff85ba1888 [ 63.055160][ T4483] [ 63.380484][ T4483] memory: usage 307200kB, limit 307200kB, failcnt 285 [ 63.387422][ T4483] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 63.395339][ T4483] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 63.402675][ T4483] Memory cgroup stats for /syz4: [ 63.402968][ T4483] cache 0 [ 63.410891][ T4483] rss 0 [ 63.413632][ T4483] shmem 0 [ 63.416551][ T4483] mapped_file 0 [ 63.420009][ T4483] dirty 0 [ 63.422929][ T4483] writeback 4096 [ 63.426462][ T4483] workingset_refault_anon 50 [ 63.431050][ T4483] workingset_refault_file 27 [ 63.435636][ T4483] swap 913408 [ 63.438912][ T4483] swapcached 8192 [ 63.442545][ T4483] pgpgin 30453 [ 63.445894][ T4483] pgpgout 30451 [ 63.449415][ T4483] pgfault 33897 [ 63.453301][ T4483] pgmajfault 32 [ 63.456812][ T4483] inactive_anon 8192 [ 63.460718][ T4483] active_anon 0 [ 63.464165][ T4483] inactive_file 0 [ 63.467778][ T4483] active_file 0 [ 63.471231][ T4483] unevictable 0 [ 63.474829][ T4483] hierarchical_memory_limit 314572800 [ 63.480184][ T4483] hierarchical_memsw_limit 9223372036854771712 [ 63.486362][ T4483] total_cache 0 [ 63.489813][ T4483] total_rss 0 [ 63.493163][ T4483] total_shmem 0 [ 63.496608][ T4483] total_mapped_file 0 [ 63.500603][ T4483] total_dirty 0 [ 63.504056][ T4483] total_writeback 4096 [ 63.508126][ T4483] total_workingset_refault_anon 50 [ 63.513221][ T4483] total_workingset_refault_file 27 [ 63.518319][ T4483] total_swap 913408 [ 63.522159][ T4483] total_swapcached 8192 [ 63.526337][ T4483] total_pgpgin 30453 [ 63.530276][ T4483] total_pgpgout 30451 [ 63.534319][ T4483] total_pgfault 33897 [ 63.538300][ T4483] total_pgmajfault 32 [ 63.542260][ T4483] total_inactive_anon 8192 [ 63.546795][ T4483] total_active_anon 0 [ 63.550758][ T4483] total_inactive_file 0 [ 63.554899][ T4483] total_active_file 0 [ 63.558953][ T4483] total_unevictable 0 [ 63.562915][ T4483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.223,pid=4481,uid=0 [ 63.577467][ T4483] Memory cgroup out of memory: Killed process 4481 (syz.4.223) total-vm:96020kB, anon-rss:1136kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 63.925249][ T4502] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.225: missing EA_INODE flag [ 63.951335][ T4502] EXT4-fs (loop3): Remounting filesystem read-only [ 63.951459][ T4502] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1230: inode #18: comm syz.3.225: ea_inode dec ref err=-30 [ 63.951531][ T4502] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 64.010542][ T4509] loop0: detected capacity change from 0 to 512 [ 64.056160][ T4483] syz.4.223 (4483) used greatest stack depth: 7032 bytes left [ 64.091285][ T4509] EXT4-fs (loop0): filesystem is read-only [ 64.133301][ T4512] infiniband syû: set active [ 64.137944][ T4512] infiniband syû: added bond_slave_0 [ 64.225557][ T4512] RDS/IB: syû: added [ 64.229480][ T4512] smc: adding ib device syû with port count 1 [ 64.235629][ T4512] smc: ib device syû port 1 has no pnetid [ 64.436361][ T4508] SELinux: ebitmap: truncated map [ 64.442557][ T4508] SELinux: failed to load policy [ 64.462022][ T4518] netlink: 'syz.2.230': attribute type 12 has an invalid length. [ 64.489171][ T4517] loop2: detected capacity change from 0 to 2048 [ 64.514519][ T4514] __nla_validate_parse: 5 callbacks suppressed [ 64.514531][ T4514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'. [ 64.555000][ T4514] IPVS: Unknown mcast interface: ipvlan1 [ 64.596701][ T4517] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #2: comm syz.2.230: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 64.608841][ T4514] SELinux: failed to load policy [ 64.621266][ T4527] loop3: detected capacity change from 0 to 2048 [ 64.633233][ T4517] EXT4-fs (loop2): Remounting filesystem read-only [ 64.704948][ T4525] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 64.788474][ T4542] netlink: 'syz.1.234': attribute type 12 has an invalid length. [ 64.826917][ T4536] loop1: detected capacity change from 0 to 2048 [ 64.838938][ T4541] loop3: detected capacity change from 0 to 1024 [ 64.856191][ T4541] EXT4-fs: Ignoring removed bh option [ 64.866493][ T4536] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 64.898659][ T4541] EXT4-fs: inline encryption not supported [ 64.905647][ T4541] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.931766][ T4536] EXT4-fs (loop1): Remounting filesystem read-only [ 64.939029][ T4541] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 64.948258][ T4541] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.235: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.952994][ T4547] loop2: detected capacity change from 0 to 512 [ 64.981991][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.236: inode has both inline data and extents flags [ 64.996380][ T4541] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.235: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.011193][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.236: couldn't read orphan inode 15 (err -117) [ 65.026302][ T3523] usb 9-1: enqueue for inactive port 0 [ 65.032532][ T3523] usb 9-1: enqueue for inactive port 0 [ 65.037439][ T4541] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.235: Failed to acquire dquot type 0 [ 65.051582][ T4541] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 65.061308][ T4541] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.235: mark_inode_dirty error [ 65.074438][ T4541] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 65.102533][ T4541] EXT4-fs (loop3): 1 orphan inode deleted [ 65.102606][ T4555] loop2: detected capacity change from 0 to 512 [ 65.109566][ T125] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.114914][ T3523] vhci_hcd: vhci_device speed not set [ 65.129060][ T125] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 65.146668][ T4555] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.153749][ T4555] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.239: bad orphan inode 13 [ 65.161721][ T4541] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.235: Invalid inode table block 1 in block_group 0 [ 65.176691][ T4555] ext4_test_bit(bit=12, block=18) = 1 [ 65.178337][ T4541] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 65.182112][ T4555] is_bad_inode(inode)=0 [ 65.182122][ T4555] NEXT_ORPHAN(inode)=2130706432 [ 65.182130][ T4555] max_ino=32 [ 65.182136][ T4555] i_nlink=1 [ 65.208410][ T4541] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.235: mark_inode_dirty error [ 65.213559][ T3331] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 65.231277][ T3331] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 65.256166][ T3331] bridge0: port 3(syz_tun) entered disabled state [ 65.264775][ T3331] syz_tun (unregistering): left allmulticast mode [ 65.271271][ T3331] syz_tun (unregistering): left promiscuous mode [ 65.277643][ T3331] bridge0: port 3(syz_tun) entered disabled state [ 65.366080][ T4564] 9pnet_fd: Insufficient options for proto=fd [ 65.430247][ T66] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.460808][ T4568] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.243'. [ 65.482490][ T66] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.536115][ T66] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.578862][ T66] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.599463][ T4571] lo speed is unknown, defaulting to 1000 [ 65.643663][ T29] kauditd_printk_skb: 1090 callbacks suppressed [ 65.643676][ T29] audit: type=1400 audit(2000000263.094:8190): avc: denied { read } for pid=3049 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.673210][ T66] bridge_slave_1: left allmulticast mode [ 65.678975][ T66] bridge_slave_1: left promiscuous mode [ 65.684740][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.692905][ T66] bridge_slave_0: left allmulticast mode [ 65.693296][ T29] audit: type=1400 audit(2000000263.113:8191): avc: denied { write } for pid=4567 comm="syz.3.243" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.698690][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.754194][ T4568] vhci_hcd: default hub control req: 0317 v0000 i0000 l0 [ 65.800602][ T29] audit: type=1400 audit(2000000263.234:8192): avc: denied { create } for pid=4581 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.807541][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 65.821435][ T29] audit: type=1326 audit(2000000263.234:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 65.853475][ T29] audit: type=1326 audit(2000000263.234:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 65.876817][ T29] audit: type=1326 audit(2000000263.234:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 65.900145][ T29] audit: type=1326 audit(2000000263.234:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 65.923489][ T29] audit: type=1326 audit(2000000263.234:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 65.946905][ T29] audit: type=1326 audit(2000000263.234:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 65.948962][ T4584] loop3: detected capacity change from 0 to 1024 [ 65.970299][ T29] audit: type=1326 audit(2000000263.234:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4581 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 66.017666][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.035963][ T4584] EXT4-fs: Ignoring removed bh option [ 66.045622][ T4584] EXT4-fs: inline encryption not supported [ 66.053118][ T4584] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.063984][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.073594][ T4584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 66.095340][ T66] bond0 (unregistering): Released all slaves [ 66.113208][ T4584] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.245: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.135239][ T4591] netlink: 'syz.0.247': attribute type 12 has an invalid length. [ 66.143107][ T3489] syû: Port: 1 Link DOWN [ 66.151521][ T66] tipc: Left network mode [ 66.163934][ T4584] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.245: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.186809][ T4587] loop0: detected capacity change from 0 to 2048 [ 66.189458][ T4584] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.245: Failed to acquire dquot type 0 [ 66.209288][ T4584] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 66.219327][ T4584] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.245: mark_inode_dirty error [ 66.240508][ T4584] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 66.252956][ T4587] EXT4-fs mount: 74 callbacks suppressed [ 66.252972][ T4587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.263597][ T4584] EXT4-fs (loop3): 1 orphan inode deleted [ 66.277409][ T4584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.289196][ T2657] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.310274][ T4571] chnl_net:caif_netlink_parms(): no params data found [ 66.338764][ T2657] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 66.397054][ T4584] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.245: Invalid inode table block 1 in block_group 0 [ 66.409915][ T4584] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 66.425384][ T4584] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.245: mark_inode_dirty error [ 66.440778][ T66] hsr_slave_0: left promiscuous mode [ 66.460457][ T66] hsr_slave_1: left promiscuous mode [ 66.466577][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.474008][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.485571][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.493140][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.510484][ T66] veth1_macvtap: left promiscuous mode [ 66.517695][ T66] veth0_macvtap: left promiscuous mode [ 66.529085][ T66] veth1_vlan: left promiscuous mode [ 66.538620][ T66] veth0_vlan: left promiscuous mode [ 66.626894][ T1665] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm kworker/u8:9: Invalid inode table block 1 in block_group 0 [ 66.653078][ T4583] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.670251][ T4583] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.245: Invalid inode table block 1 in block_group 0 [ 66.715022][ T4583] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 66.742331][ T66] team0 (unregistering): Port device team_slave_1 removed [ 66.751351][ T4583] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.245: mark_inode_dirty error [ 66.773536][ T66] team0 (unregistering): Port device team_slave_0 removed [ 66.794336][ T1665] smc: removing ib device syû [ 66.847783][ T66] team0 (unregistering): Port device dummy0 removed [ 66.886115][ T3512] lo speed is unknown, defaulting to 1000 [ 66.891872][ T3512] infiniband syz2: ib_query_port failed (-19) [ 66.903842][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.965639][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.972774][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.995550][ T4571] bridge_slave_0: entered allmulticast mode [ 67.003287][ T4571] bridge_slave_0: entered promiscuous mode [ 67.020508][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.034685][ T4628] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 67.051164][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.058380][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.092490][ T4571] bridge_slave_1: entered allmulticast mode [ 67.105641][ T4571] bridge_slave_1: entered promiscuous mode [ 67.118988][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.172260][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.184047][ T4629] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 67.195880][ T4571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.212637][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.219972][ T4571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.235808][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.242007][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.268513][ T4634] netlink: 92 bytes leftover after parsing attributes in process `syz.1.254'. [ 67.277658][ T4571] team0: Port device team_slave_0 added [ 67.284171][ T4571] team0: Port device team_slave_1 added [ 67.298826][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.305023][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.314639][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'. [ 67.333296][ T4629] wg1 speed is unknown, defaulting to 1000 [ 67.339581][ T4571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.346541][ T4571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.372497][ T4571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.385618][ T4571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.392643][ T4571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.418592][ T4571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.479338][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 67.489846][ T4571] hsr_slave_0: entered promiscuous mode [ 67.519110][ T4655] xt_SECMARK: invalid mode: 2 [ 67.531535][ T4571] hsr_slave_1: entered promiscuous mode [ 67.544467][ T4571] debugfs: 'hsr0' already exists in 'hsr' [ 67.550213][ T4571] Cannot create hsr debugfs directory [ 67.727757][ T4571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.746738][ T4571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.756386][ T4571] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.766464][ T4571] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.797060][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.804207][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.811586][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.818647][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.867008][ T4571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.877241][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.885315][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.903660][ T4571] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.920093][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.927236][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.949725][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.956803][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.045892][ T4710] netlink: 'syz.3.262': attribute type 12 has an invalid length. [ 68.056653][ T4571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.216539][ T4571] veth0_vlan: entered promiscuous mode [ 68.224235][ T4571] veth1_vlan: entered promiscuous mode [ 68.239489][ T4571] veth0_macvtap: entered promiscuous mode [ 68.246858][ T4571] veth1_macvtap: entered promiscuous mode [ 68.261466][ T4571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.273295][ T4571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.281238][ T4736] netlink: 24 bytes leftover after parsing attributes in process `syz.3.265'. [ 68.293255][ T4736] IPVS: Error connecting to the multicast addr [ 68.304026][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.312925][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.341843][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.362720][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.375260][ T4742] siw: device registration error -23 [ 68.429548][ T4748] netlink: 'syz.5.244': attribute type 1 has an invalid length. [ 68.437371][ T4748] netlink: 224 bytes leftover after parsing attributes in process `syz.5.244'. [ 68.468885][ T4753] vlan2: entered promiscuous mode [ 68.474009][ T4753] vlan2: entered allmulticast mode [ 68.479224][ T4753] hsr_slave_1: entered allmulticast mode [ 68.500487][ T3428] IPVS: starting estimator thread 0... [ 68.525709][ T4762] netlink: 44 bytes leftover after parsing attributes in process `syz.3.271'. [ 68.544145][ T4753] netlink: 48 bytes leftover after parsing attributes in process `syz.0.270'. [ 68.613334][ T4760] IPVS: using max 2640 ests per chain, 132000 per kthread [ 68.677675][ T4771] netlink: 'syz.4.273': attribute type 12 has an invalid length. [ 68.749981][ T4777] bond0: entered promiscuous mode [ 68.755164][ T4777] bond_slave_0: entered promiscuous mode [ 68.760852][ T4777] bond_slave_1: entered promiscuous mode [ 68.768353][ T4777] bond0: left promiscuous mode [ 68.773167][ T4777] bond_slave_0: left promiscuous mode [ 68.778714][ T4777] bond_slave_1: left promiscuous mode [ 68.801298][ T4778] netlink: 'syz.0.276': attribute type 12 has an invalid length. [ 68.823926][ T4776] loop0: detected capacity change from 0 to 2048 [ 68.847859][ T4776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.876114][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.933587][ T4784] loop0: detected capacity change from 0 to 128 [ 68.936087][ T4787] siw: device registration error -23 [ 68.951034][ T4784] vfat: Unknown parameter '00000000000000000000' [ 69.089030][ T4804] netlink: 'syz.4.284': attribute type 13 has an invalid length. [ 69.161406][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.170157][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.176615][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.188287][ T4813] netlink: 'syz.0.286': attribute type 12 has an invalid length. [ 69.218299][ T4808] loop0: detected capacity change from 0 to 2048 [ 69.239369][ T4808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.259336][ T4806] infiniband syz2: set down [ 69.263871][ T4806] infiniband syz2: added ip6_vti0 [ 69.269049][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.286066][ T4806] RDS/IB: syz2: added [ 69.290348][ T4806] smc: adding ib device syz2 with port count 1 [ 69.301134][ T4806] smc: ib device syz2 port 1 has no pnetid [ 69.312575][ T4808] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.286: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 69.338987][ T4812] team0: Port device dummy0 removed [ 69.345489][ T4812] bond0: (slave bond_slave_0): Releasing backup interface [ 69.368740][ T4812] bond0: (slave bond_slave_1): Releasing backup interface [ 69.395997][ T4812] team0: Port device team_slave_0 removed [ 69.403091][ T4808] EXT4-fs (loop0): Remounting filesystem read-only [ 69.411781][ T4812] team0: Port device team_slave_1 removed [ 69.428574][ T4812] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 69.442998][ T4824] loop5: detected capacity change from 0 to 8192 [ 69.452509][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.459196][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.475042][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.518569][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.602582][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.604231][ T4831] wg1 speed is unknown, defaulting to 1000 [ 69.650794][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.658228][ T1665] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.701901][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 69.754798][ T4806] ip6_vti0 speed is unknown, defaulting to 1000 [ 70.199783][ T4841] siw: device registration error -23 [ 70.357540][ T4846] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.387318][ T4850] syz.5.298 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.439470][ T4850] wg1 speed is unknown, defaulting to 1000 [ 70.445847][ T4850] ip6_vti0 speed is unknown, defaulting to 1000 [ 70.533484][ T4846] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.610707][ T4861] loop5: detected capacity change from 0 to 512 [ 70.637551][ T4861] EXT4-fs: Ignoring removed bh option [ 70.644919][ T4846] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.667257][ T4861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.683520][ T4868] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 70.691457][ T4861] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.709264][ T4861] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.300: corrupted inode contents [ 70.731589][ T4861] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.300: mark_inode_dirty error [ 70.755937][ T4861] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.300: corrupted inode contents [ 70.797888][ T4861] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #18: comm syz.5.300: mark_inode_dirty error [ 70.816174][ T4846] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.831967][ T4874] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 70.842516][ T4861] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #18: comm syz.5.300: mark inode dirty (error -117) [ 70.876115][ T4861] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 70.920662][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.987028][ T4881] __nla_validate_parse: 6 callbacks suppressed [ 70.987079][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 71.005075][ T29] kauditd_printk_skb: 1452 callbacks suppressed [ 71.005136][ T29] audit: type=1326 audit(2000000268.108:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.034850][ T29] audit: type=1326 audit(2000000268.108:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.058273][ T29] audit: type=1400 audit(2000000268.108:9651): avc: denied { write } for pid=4880 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.079125][ T29] audit: type=1326 audit(2000000268.173:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.103090][ T29] audit: type=1326 audit(2000000268.201:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.146967][ T29] audit: type=1326 audit(2000000268.220:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.170327][ T29] audit: type=1326 audit(2000000268.220:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.171045][ T66] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.193808][ T29] audit: type=1326 audit(2000000268.220:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.193840][ T29] audit: type=1326 audit(2000000268.220:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.248619][ T29] audit: type=1326 audit(2000000268.220:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f64990ef749 code=0x7ffc0000 [ 71.268162][ T4884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.304498][ T66] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.315037][ T66] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.323284][ T66] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.339997][ T4884] loop5: detected capacity change from 0 to 1024 [ 71.348511][ T4884] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 71.454383][ T4895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 71.482894][ T4897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.310'. [ 71.698051][ T4904] wg1 speed is unknown, defaulting to 1000 [ 71.704774][ T4904] ip6_vti0 speed is unknown, defaulting to 1000 [ 71.916969][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.981017][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 71.992238][ T4914] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.132462][ T4924] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.282160][ T4983] netlink: 'syz.3.329': attribute type 13 has an invalid length. [ 72.303348][ T4985] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.319'. [ 72.343207][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 72.399020][ T4914] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.468946][ T4914] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.529270][ T4914] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.586572][ T2253] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.604828][ T2253] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.613407][ T2253] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.621698][ T2253] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.673400][ T5011] sit0: Caught tx_queue_len zero misconfig [ 72.724117][ T5011] capability: warning: `syz.4.326' uses deprecated v2 capabilities in a way that may be insecure [ 72.740156][ T5017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.754865][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 72.790062][ T5021] netlink: 'syz.0.327': attribute type 12 has an invalid length. [ 72.841967][ T5021] loop0: detected capacity change from 0 to 2048 [ 72.872623][ T5021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.913772][ T5021] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 72.971951][ T5039] netlink: 'syz.1.334': attribute type 13 has an invalid length. [ 72.975177][ T5021] EXT4-fs (loop0): Remounting filesystem read-only [ 73.038180][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.091376][ T5041] pim6reg: entered allmulticast mode [ 73.114643][ T5041] pim6reg: left allmulticast mode [ 73.137704][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 73.167326][ T5048] batadv_slave_1: entered promiscuous mode [ 73.522952][ T5057] wg1 speed is unknown, defaulting to 1000 [ 73.529266][ T5057] ip6_vti0 speed is unknown, defaulting to 1000 [ 73.880470][ T5065] loop5: detected capacity change from 0 to 1024 [ 73.899637][ T5065] EXT4-fs: Ignoring removed orlov option [ 73.932792][ T5065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.059336][ T5047] batadv_slave_1: left promiscuous mode [ 74.124586][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 74.154682][ T3523] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 74.171085][ T3523] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.171445][ T5076] loop0: detected capacity change from 0 to 1024 [ 74.193338][ T5076] EXT4-fs: Ignoring removed oldalloc option [ 74.225646][ T5076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.257746][ T5076] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.274709][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.340582][ T5076] netlink: 64 bytes leftover after parsing attributes in process `syz.0.343'. [ 74.351340][ T5076] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.343: lblock 0 mapped to illegal pblock 0 (length 1) [ 74.369400][ T5091] bridge0: port 3(syz_tun) entered blocking state [ 74.375175][ T5076] EXT4-fs (loop0): Remounting filesystem read-only [ 74.375908][ T5091] bridge0: port 3(syz_tun) entered disabled state [ 74.376158][ T5091] syz_tun: entered allmulticast mode [ 74.395573][ T5091] syz_tun: entered promiscuous mode [ 74.401038][ T5091] bridge0: port 3(syz_tun) entered blocking state [ 74.407499][ T5091] bridge0: port 3(syz_tun) entered forwarding state [ 74.426838][ T5091] loop5: detected capacity change from 0 to 1024 [ 74.436643][ T5091] EXT4-fs: Ignoring removed bh option [ 74.446740][ T5091] EXT4-fs: inline encryption not supported [ 74.454045][ T5093] SET target dimension over the limit! [ 74.467700][ T5091] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.481627][ T5091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 74.491920][ T5091] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.347: lblock 2 mapped to illegal pblock 2 (length 1) [ 74.506132][ T5091] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.347: lblock 0 mapped to illegal pblock 48 (length 1) [ 74.520598][ T5091] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.347: Failed to acquire dquot type 0 [ 74.532381][ T5091] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 74.542056][ T5091] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.347: mark_inode_dirty error [ 74.554233][ T5091] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 74.564469][ T5091] EXT4-fs (loop5): 1 orphan inode deleted [ 74.570916][ T5091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.583668][ T4945] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 74.605500][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.625130][ T4945] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:30: Failed to release dquot type 0 [ 74.648510][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.667412][ T5102] netlink: 'syz.0.349': attribute type 13 has an invalid length. [ 74.681107][ T5091] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.347: Invalid inode table block 1 in block_group 0 [ 74.714418][ T5091] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 74.724814][ T5091] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.347: mark_inode_dirty error [ 74.827078][ T3429] wg1 speed is unknown, defaulting to 1000 [ 74.915648][ T5114] loop5: detected capacity change from 0 to 1024 [ 74.925049][ T5114] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.939498][ T5114] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.354: Invalid block bitmap block 0 in block_group 0 [ 74.953985][ T5114] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.354: Failed to acquire dquot type 0 [ 74.965494][ T5114] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.354: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.979175][ T5114] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.354: Invalid inode bitmap blk 0 in block_group 0 [ 74.993128][ T5114] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 75.002011][ T31] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 75.002193][ T5114] EXT4-fs (loop5): 1 orphan inode deleted [ 75.020271][ T5114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.071848][ T5119] loop0: detected capacity change from 0 to 512 [ 75.086787][ T5119] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.355: inode has both inline data and extents flags [ 75.100255][ T5119] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.355: couldn't read orphan inode 15 (err -117) [ 75.100864][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.122261][ T5119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.136561][ T5119] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 75.172100][ T5122] loop5: detected capacity change from 0 to 1024 [ 75.181504][ T5122] EXT4-fs: Ignoring removed bh option [ 75.187139][ T5122] EXT4-fs: inline encryption not supported [ 75.188430][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.203256][ T5122] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.216439][ T5122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 75.242931][ T5122] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.356: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.248259][ T5125] loop0: detected capacity change from 0 to 128 [ 75.267202][ T5122] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.356: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.282000][ T5122] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.356: Failed to acquire dquot type 0 [ 75.295335][ T5122] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 75.305146][ T5122] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.356: mark_inode_dirty error [ 75.317264][ T5122] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 75.345837][ T5122] EXT4-fs (loop5): 1 orphan inode deleted [ 75.352802][ T5122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.370978][ T4962] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.385724][ T4962] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:47: Failed to release dquot type 0 [ 75.409643][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.420146][ T4571] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 75.433200][ T4571] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 75.446420][ T4571] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 75.500038][ T5140] SELinux: Context @ is not valid (left unmapped). [ 75.568932][ T5143] netlink: 'syz.1.362': attribute type 12 has an invalid length. [ 75.581121][ T5136] wg1 speed is unknown, defaulting to 1000 [ 75.589757][ T5136] ip6_vti0 speed is unknown, defaulting to 1000 [ 75.753862][ T5157] netlink: 'syz.1.365': attribute type 12 has an invalid length. [ 76.403076][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 76.403091][ T29] audit: type=1400 audit(2000000273.149:10431): avc: denied { unlink } for pid=4571 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 76.442308][ T5160] netlink: 'syz.5.366': attribute type 13 has an invalid length. [ 76.466219][ T29] audit: type=1400 audit(2000000273.206:10432): avc: denied { create } for pid=5163 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.485834][ T29] audit: type=1400 audit(2000000273.206:10433): avc: denied { setopt } for pid=5163 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.505360][ T29] audit: type=1326 audit(2000000273.215:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.528867][ T29] audit: type=1326 audit(2000000273.215:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.552338][ T29] audit: type=1326 audit(2000000273.215:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.575781][ T29] audit: type=1326 audit(2000000273.215:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.599239][ T29] audit: type=1326 audit(2000000273.215:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.622726][ T29] audit: type=1326 audit(2000000273.215:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.646198][ T29] audit: type=1326 audit(2000000273.215:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd605f749 code=0x7ffc0000 [ 76.670002][ T5162] loop0: detected capacity change from 0 to 1024 [ 76.676954][ T5162] ext4: Unknown parameter 'uid<00000000000000000000' [ 76.745824][ T5174] netlink: 'syz.3.369': attribute type 1 has an invalid length. [ 76.790348][ T5176] __nla_validate_parse: 2 callbacks suppressed [ 76.790393][ T5176] netlink: 72 bytes leftover after parsing attributes in process `syz.0.370'. [ 76.921725][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'. [ 76.998257][ T5185] loop5: detected capacity change from 0 to 1024 [ 77.006912][ T5185] EXT4-fs: Ignoring removed bh option [ 77.012755][ T5185] EXT4-fs: inline encryption not supported [ 77.028107][ T5185] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.046302][ T5185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 77.056209][ T5185] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.374: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.070897][ T5185] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.374: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.086103][ T5185] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.374: Failed to acquire dquot type 0 [ 77.097953][ T5185] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 77.107896][ T5185] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.374: mark_inode_dirty error [ 77.119376][ T5185] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 77.130417][ T5185] EXT4-fs (loop5): 1 orphan inode deleted [ 77.136972][ T5185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.149636][ T3843] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.164153][ T3843] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 77.195615][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.207713][ T4571] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.221043][ T4571] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 77.230597][ T4571] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 77.395261][ T5196] loop5: detected capacity change from 0 to 512 [ 77.402078][ T5196] journal_path: Non-blockdev passed as './bus' [ 77.408233][ T5196] EXT4-fs: error: could not find journal device path [ 77.463698][ T5196] loop5: detected capacity change from 0 to 8192 [ 77.478291][ T5201] netlink: 'syz.4.380': attribute type 12 has an invalid length. [ 77.508050][ T3604] loop5: p1 p2 p4 [ 77.514428][ T3604] loop5: p4 size 262912 extends beyond EOD, truncated [ 77.533412][ T5196] loop5: p1 p2 p4 [ 77.538300][ T5196] loop5: p4 size 262912 extends beyond EOD, truncated [ 77.659348][ T5207] loop5: detected capacity change from 0 to 256 [ 77.689276][ T5207] hub 9-0:1.0: USB hub found [ 77.706918][ T5207] hub 9-0:1.0: 8 ports detected [ 77.732572][ T5207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.382'. [ 77.741463][ T5207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.382'. [ 77.760063][ T5207] lo: Caught tx_queue_len zero misconfig [ 77.767042][ T5207] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.921238][ T5211] wg1 speed is unknown, defaulting to 1000 [ 77.940605][ T5211] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.993587][ T5218] wg1 speed is unknown, defaulting to 1000 [ 78.035496][ T5218] ip6_vti0 speed is unknown, defaulting to 1000 [ 78.349694][ T5240] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.362445][ T5240] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.388: invalid indirect mapped block 4294967295 (level 1) [ 78.377173][ T5240] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.388: invalid indirect mapped block 4294967295 (level 1) [ 78.391467][ T5240] EXT4-fs (loop0): 2 truncates cleaned up [ 78.397821][ T5240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.628713][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.700477][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 78.967658][ T5270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.039347][ T5270] EXT4-fs (loop0): 1 truncate cleaned up [ 79.064229][ T5270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.132293][ T5280] pim6reg: entered allmulticast mode [ 79.139726][ T5280] pim6reg: left allmulticast mode [ 79.194229][ T5287] batadv_slave_1: entered promiscuous mode [ 79.405603][ T5293] netlink: 'syz.3.398': attribute type 13 has an invalid length. [ 79.457856][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 79.501700][ T5299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 79.773360][ T5316] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 79.796101][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.819157][ T5319] pim6reg: entered allmulticast mode [ 79.826259][ T5319] pim6reg: left allmulticast mode [ 79.831365][ T5320] serio: Serial port ttyS3 [ 79.841493][ T5322] set_capacity_and_notify: 3 callbacks suppressed [ 79.841508][ T5322] loop0: detected capacity change from 0 to 164 [ 79.860519][ T5322] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 79.918337][ T5326] loop0: detected capacity change from 0 to 512 [ 79.932280][ T5326] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.409: EA inode hash validation failed [ 79.950728][ T5326] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.409: corrupted inode contents [ 79.963145][ T5326] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.409: mark_inode_dirty error [ 79.974945][ T5326] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.409: corrupted inode contents [ 79.987385][ T5326] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.409: mark_inode_dirty error [ 79.999692][ T5326] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.409: mark inode dirty (error -117) [ 80.013477][ T5326] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 80.022834][ T5326] EXT4-fs (loop0): 1 orphan inode deleted [ 80.028891][ T5326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.044618][ T5334] netlink: 10 bytes leftover after parsing attributes in process `syz.3.411'. [ 80.055693][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 80.076378][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.100068][ T5286] batadv_slave_1: left promiscuous mode [ 80.130414][ T5337] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.170958][ T5342] bridge0: port 3(syz_tun) entered blocking state [ 80.177508][ T5342] bridge0: port 3(syz_tun) entered disabled state [ 80.187243][ T5345] netlink: 76 bytes leftover after parsing attributes in process `syz.4.415'. [ 80.196876][ T5342] syz_tun: entered allmulticast mode [ 80.203200][ T5342] syz_tun: entered promiscuous mode [ 80.208699][ T5342] bridge0: port 3(syz_tun) entered blocking state [ 80.215200][ T5342] bridge0: port 3(syz_tun) entered forwarding state [ 80.241802][ T5355] loop0: detected capacity change from 0 to 1024 [ 80.250216][ T5355] EXT4-fs: Ignoring removed bh option [ 80.269857][ T5355] EXT4-fs: inline encryption not supported [ 80.289973][ T5355] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 80.302588][ T5355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 80.311751][ T5355] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.414: lblock 2 mapped to illegal pblock 2 (length 1) [ 80.325913][ T5355] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.414: lblock 0 mapped to illegal pblock 48 (length 1) [ 80.342683][ T5355] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.414: Failed to acquire dquot type 0 [ 80.354144][ T5355] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 80.363764][ T5355] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.414: mark_inode_dirty error [ 80.375496][ T5355] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 80.385836][ T5355] EXT4-fs (loop0): 1 orphan inode deleted [ 80.392356][ T5355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.405024][ T4935] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.421678][ T4935] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0 [ 80.447707][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.458430][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 80.471450][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 80.483421][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 80.621324][ T5394] batadv_slave_1: entered promiscuous mode [ 80.637538][ T5381] wg1 speed is unknown, defaulting to 1000 [ 80.644511][ T5381] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.656294][ T5395] vlan0: entered allmulticast mode [ 80.661510][ T5395] bridge_slave_0: entered allmulticast mode [ 80.769253][ T5400] wg1 speed is unknown, defaulting to 1000 [ 80.777229][ T5400] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.895171][ T5409] pim6reg: entered allmulticast mode [ 80.902713][ T5409] pim6reg: left allmulticast mode [ 80.988274][ T5415] siw: device registration error -23 [ 81.085283][ T5421] loop5: detected capacity change from 0 to 1024 [ 81.164600][ T5426] x_tables: duplicate underflow at hook 2 [ 81.207150][ T5421] EXT4-fs: Ignoring removed bh option [ 81.244057][ T5421] EXT4-fs: inline encryption not supported [ 81.318103][ T5421] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.435263][ T5421] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 81.448512][ T5417] netlink: 'syz.4.427': attribute type 3 has an invalid length. [ 81.459309][ T5421] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.428: lblock 2 mapped to illegal pblock 2 (length 1) [ 81.516251][ T5421] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.428: lblock 0 mapped to illegal pblock 48 (length 1) [ 81.544005][ T5393] batadv_slave_1: left promiscuous mode [ 81.606124][ T5421] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.428: Failed to acquire dquot type 0 [ 81.660273][ T5434] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 81.679087][ T5421] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 81.720379][ T5421] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.428: mark_inode_dirty error [ 81.749097][ T5436] loop0: detected capacity change from 0 to 1024 [ 81.756972][ T5421] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 81.770256][ T29] kauditd_printk_skb: 1547 callbacks suppressed [ 81.770270][ T29] audit: type=1400 audit(2000000278.173:11980): avc: denied { mounton } for pid=5435 comm="syz.0.432" path="/81/file0" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.799478][ T5436] EXT4-fs: Ignoring removed bh option [ 81.819529][ T5436] EXT4-fs: inline encryption not supported [ 81.979672][ T5421] EXT4-fs (loop5): 1 orphan inode deleted [ 81.998050][ T3843] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.013089][ T5436] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.034912][ T5421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.059174][ T5436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 82.068067][ T3843] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 82.076614][ T3843] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 82.089013][ T29] audit: type=1326 audit(2000000278.211:11981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2493eb65e7 code=0x7ffc0000 [ 82.112487][ T29] audit: type=1326 audit(2000000278.211:11982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2493e5b829 code=0x7ffc0000 [ 82.135898][ T29] audit: type=1326 audit(2000000278.211:11983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 82.159290][ T29] audit: type=1326 audit(2000000278.220:11984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2493eb65e7 code=0x7ffc0000 [ 82.182637][ T29] audit: type=1326 audit(2000000278.220:11985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2493e5b829 code=0x7ffc0000 [ 82.205927][ T29] audit: type=1326 audit(2000000278.220:11986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f2493ebf749 code=0x7ffc0000 [ 82.229381][ T29] audit: type=1326 audit(2000000278.220:11987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2493eb65e7 code=0x7ffc0000 [ 82.252685][ T29] audit: type=1326 audit(2000000278.220:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2493e5b829 code=0x7ffc0000 [ 82.287248][ T5436] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.432: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.313837][ T5436] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.432: lblock 0 mapped to illegal pblock 48 (length 1) [ 82.351744][ T5436] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.432: Failed to acquire dquot type 0 [ 82.369200][ T5436] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 82.379217][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.390608][ T5436] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.432: mark_inode_dirty error [ 82.402856][ T4571] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 82.425311][ T4571] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 82.435078][ T5436] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 82.453612][ T4571] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 82.475674][ T5436] EXT4-fs (loop0): 1 orphan inode deleted [ 82.482175][ T5436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.494780][ T4940] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 82.527559][ T4940] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0 [ 82.557253][ T5441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5441 comm=)+ [ 82.575339][ T5436] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.609258][ T5436] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.432: Invalid inode table block 1 in block_group 0 [ 82.636067][ T5436] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 82.649616][ T5436] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.432: mark_inode_dirty error [ 82.686046][ T5449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=5449 comm=syz.4.438 [ 82.719185][ T5449] netlink: 660 bytes leftover after parsing attributes in process `syz.4.438'. [ 82.833240][ T5454] wg1 speed is unknown, defaulting to 1000 [ 82.839523][ T5454] ip6_vti0 speed is unknown, defaulting to 1000 [ 82.889221][ T5449] infiniband syû: set down [ 82.893694][ T5449] infiniband syû: added bond_slave_0 [ 82.926777][ T5449] RDS/IB: syû: added [ 82.942782][ T5449] smc: adding ib device syû with port count 1 [ 82.961534][ T5449] smc: ib device syû port 1 has no pnetid [ 83.077845][ T5472] loop0: detected capacity change from 0 to 1024 [ 83.093932][ T5460] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 83.104807][ T5472] EXT4-fs: Ignoring removed bh option [ 83.124547][ T5475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.445'. [ 83.132114][ T5472] EXT4-fs: inline encryption not supported [ 83.140392][ T5472] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.173266][ T5472] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 83.195513][ T5472] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.444: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.222849][ T5472] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.444: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.238100][ T5472] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.444: Failed to acquire dquot type 0 [ 83.253590][ T5472] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 83.263459][ T5472] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.444: mark_inode_dirty error [ 83.270588][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.283411][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.292307][ T5472] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 83.302688][ T5472] EXT4-fs (loop0): 1 orphan inode deleted [ 83.309101][ T5472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.333336][ T3843] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.390729][ T3843] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 83.406845][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.431738][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.455631][ T3320] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 83.470777][ T3320] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 83.484457][ T3320] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 83.505056][ T5489] batadv_slave_0: Caught tx_queue_len zero misconfig [ 83.523391][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.532284][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.546806][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.579766][ T5492] loop0: detected capacity change from 0 to 512 [ 83.582366][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.594867][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 83.612507][ T5492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.612561][ T5492] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.631183][ T5482] loop5: detected capacity change from 0 to 32768 [ 83.676914][ T4523] loop5: p1 p2 p3 < p5 p6 > [ 83.685569][ T4523] loop5: p2 size 16775168 extends beyond EOD, truncated [ 83.688123][ T5496] netlink: 'syz.5.447': attribute type 298 has an invalid length. [ 83.701531][ T4523] loop5: p5 start 4294970168 is beyond EOD, truncated [ 83.721535][ T5482] loop5: p1 p2 p3 < p5 p6 > [ 83.726824][ T5482] loop5: p2 size 16775168 extends beyond EOD, truncated [ 83.735023][ T5482] loop5: p5 start 4294970168 is beyond EOD, truncated [ 83.756847][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.812648][ T5506] loop0: detected capacity change from 0 to 512 [ 83.858157][ T5506] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.872850][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 83.875832][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 83.884149][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 83.911462][ T5506] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.452: ea_inode file size=4 entry size=6 [ 83.935683][ T3604] udevd[3604]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 83.953292][ T5506] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.975969][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.452: corrupted inode contents [ 83.989139][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 83.989287][ T3604] udevd[3604]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 84.000474][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 84.009918][ T4523] udevd[4523]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 84.028475][ T5506] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.452: mark_inode_dirty error [ 84.051660][ T5506] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.452: corrupted inode contents [ 84.064478][ T5503] wg1 speed is unknown, defaulting to 1000 [ 84.070696][ T5506] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.452: mark_inode_dirty error [ 84.092614][ T5503] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.102342][ T5506] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.452: mark inode dirty (error -117) [ 84.145917][ T5506] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 84.167084][ T5506] EXT4-fs (loop0): 1 orphan inode deleted [ 84.173283][ T5506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.217722][ T5527] netlink: 'syz.1.467': attribute type 12 has an invalid length. [ 84.377161][ T5510] wg1 speed is unknown, defaulting to 1000 [ 84.410665][ T5510] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.507365][ T5554] loop5: detected capacity change from 0 to 512 [ 84.517694][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.543907][ T5559] netlink: 'syz.4.463': attribute type 12 has an invalid length. [ 84.558903][ T5561] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 84.690950][ T5564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 84.854582][ T5570] siw: device registration error -23 [ 84.961724][ T5577] wg1 speed is unknown, defaulting to 1000 [ 84.968752][ T5579] netlink: 'syz.0.470': attribute type 30 has an invalid length. [ 84.977635][ T5577] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.986976][ T3843] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.995857][ T3843] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.006610][ T5575] geneve2: entered promiscuous mode [ 85.011840][ T5575] geneve2: entered allmulticast mode [ 85.019438][ T3843] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.027851][ T3843] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.049611][ T5579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5579 comm=syz.0.470 [ 85.157532][ T5585] set_capacity_and_notify: 2 callbacks suppressed [ 85.157547][ T5585] loop0: detected capacity change from 0 to 256 [ 85.180879][ T5585] hub 9-0:1.0: USB hub found [ 85.189759][ T5585] hub 9-0:1.0: 8 ports detected [ 85.208661][ T5585] lo: Caught tx_queue_len zero misconfig [ 85.218532][ T5585] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.283604][ T5596] pim6reg: entered allmulticast mode [ 85.302199][ T5596] pim6reg: left allmulticast mode [ 85.384038][ T5605] netlink: 'syz.0.478': attribute type 12 has an invalid length. [ 85.401117][ T5600] loop0: detected capacity change from 0 to 2048 [ 85.414820][ T5600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.422572][ T5604] wg1 speed is unknown, defaulting to 1000 [ 85.428531][ T5600] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.478: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 85.441149][ T5604] ip6_vti0 speed is unknown, defaulting to 1000 [ 85.475488][ T4571] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 85.499902][ T5600] EXT4-fs (loop0): Remounting filesystem read-only [ 85.533136][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.563250][ T5613] loop5: detected capacity change from 0 to 1024 [ 85.578104][ T5613] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.589042][ T5613] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.604265][ T5613] JBD2: no valid journal superblock found [ 85.610059][ T5613] EXT4-fs (loop5): Could not load journal inode [ 85.657048][ T5613] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 85.887374][ T5628] loop5: detected capacity change from 0 to 1024 [ 85.896114][ T5628] EXT4-fs: Ignoring removed bh option [ 85.907884][ T5628] EXT4-fs: inline encryption not supported [ 85.914924][ T5628] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.936750][ T5628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 85.955149][ T5628] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.485: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.972013][ T5628] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.485: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.989433][ T5628] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.485: Failed to acquire dquot type 0 [ 86.003807][ T5628] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 86.018488][ T5628] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.485: mark_inode_dirty error [ 86.030530][ T5628] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 86.042756][ T5628] EXT4-fs (loop5): 1 orphan inode deleted [ 86.050704][ T5628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.063477][ T2657] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.066336][ T5626] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.078185][ T2657] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 86.097603][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.112870][ T5628] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.485: Invalid inode table block 1 in block_group 0 [ 86.135871][ T5626] loop0: detected capacity change from 0 to 1024 [ 86.144787][ T5628] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 86.158457][ T5626] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 86.173221][ T5628] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.485: mark_inode_dirty error [ 86.248190][ T5634] wg1 speed is unknown, defaulting to 1000 [ 86.255617][ T5634] ip6_vti0 speed is unknown, defaulting to 1000 [ 86.454522][ T3010] ================================================================== [ 86.462635][ T3010] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 86.470975][ T3010] [ 86.473293][ T3010] write to 0xffff88811a9f5258 of 8 bytes by task 3604 on cpu 1: [ 86.480921][ T3010] inode_set_ctime_current+0x524/0x760 [ 86.486386][ T3010] simple_unlink+0x2d/0x80 [ 86.490793][ T3010] shmem_unlink+0x12d/0x140 [ 86.495302][ T3010] vfs_unlink+0x28b/0x440 [ 86.499630][ T3010] do_unlinkat+0x1cd/0x4b0 [ 86.504045][ T3010] __x64_sys_unlink+0x2e/0x40 [ 86.508705][ T3010] x64_sys_call+0x2f48/0x3000 [ 86.513382][ T3010] do_syscall_64+0xd8/0x2a0 [ 86.517890][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.523778][ T3010] [ 86.526080][ T3010] read to 0xffff88811a9f5258 of 8 bytes by task 3010 on cpu 0: [ 86.533609][ T3010] atime_needs_update+0x2ef/0x3e0 [ 86.538642][ T3010] touch_atime+0x4a/0x340 [ 86.542974][ T3010] do_readlinkat+0x134/0x320 [ 86.547564][ T3010] __x64_sys_readlink+0x47/0x60 [ 86.552426][ T3010] x64_sys_call+0x2af1/0x3000 [ 86.557104][ T3010] do_syscall_64+0xd8/0x2a0 [ 86.561615][ T3010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.567515][ T3010] [ 86.569834][ T3010] value changed: 0x0000000077359521 -> 0x0000000077359522 [ 86.576939][ T3010] [ 86.579258][ T3010] Reported by Kernel Concurrency Sanitizer on: [ 86.585410][ T3010] CPU: 0 UID: 0 PID: 3010 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.596267][ T3010] Tainted: [W]=WARN [ 86.600067][ T3010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.610120][ T3010] ================================================================== [ 86.727611][ T5676] wg1 speed is unknown, defaulting to 1000 [ 86.733960][ T5676] ip6_vti0 speed is unknown, defaulting to 1000 [ 86.945929][ T5676] siw: device registration error -23 [ 86.952461][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 86.952472][ T29] audit: type=1400 audit(2000000291.307:12775): avc: denied { create } for pid=5644 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.978780][ T29] audit: type=1400 audit(2000000291.307:12776): avc: denied { write } for pid=5644 comm="syz.4.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1