last executing test programs: 5.803386891s ago: executing program 2 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r6, &(0x7f0000000480)='./file0\x00', r6, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "88407c6d7e76fc0e221afa1a44859814"}, 0x11, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={r8, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff0000}]}, &(0x7f00000001c0)=0x10) recvmmsg(r7, &(0x7f0000005c80), 0x1, 0x0, 0x0) 5.777710363s ago: executing program 4 (id=71): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) utime(&(0x7f0000000000)='.\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="410b0000000004000e2564b65a380300d7e01029b6411c753b00"/38], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000001140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@posixacl}, {@nodevmap}, {@posixacl}, {@access_uid={'access', 0x3d, r1}}], [{@fowner_gt={'fowner>', r1}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x62, 0x66, 0x31, 0x31, 0x36, 0x39], 0x2d, [0x39, 0x5f, 0x38, 0x61], 0x2d, [0x32, 0x63, 0x61, 0x65], 0x2d, [0x35, 0x61, 0x34, 0x64], 0x2d, [0x38, 0x66, 0x34, 0x33, 0x64, 0x61, 0x66, 0x39]}}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}, {@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'subj_role'}}]}}) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f00000001c0)={[], [{@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@flag='nomand'}, {@dont_hash}, {@uid_lt={'uid<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}, 0x0, 0x5b4, &(0x7f0000000b80)="$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") r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_dev$vcsu(&(0x7f0000000480), 0x7, 0x2) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x3, '\x00', r4, r8, 0x1, 0x2, 0x2}, 0x50) syz_read_part_table(0x618, &(0x7f0000002200)="$eJzs3D+IFGcUAPC3dzc7dwqehUWwiWctBMXSK6LsbQwGZE0IHBb5iwhXXeBgQxY3eEVyheIWYplGApviXKvoFVY5FFIHsTAIW9gETBNiipsws3O3GzgOEjaE4O9XfN/bnTfvzQfTvgn+1yYiKaMsLbY3PtozP5sdxu14r1tbOJtlWfZuRCUuRhJzyYFeRExF9G6NVI2jEbF/pM7tb/ZtfP3rW0n3yYVktH470jiY51YjL1ma2e1R0r99WMZufX5z9urqcv1a/qPe6m+9H3HnRa1x79xapzeZnPkk//9KxMMyf6pYZya27/9wKv5yZQ9fDsPKaP/tl+Py43qrf6v77PjW4frk95dOvTyycf3BiYiVvPL5KF72oeo/P/Oo9fnNrFT0X5m7sdhpnT5299DNk837jxrPJ38vLw9aToynLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/5L1fFmtxrXm/OXH9Vb/q59+fOfOi1rj3rm1Tu/t6pmnlUHewzJ/qtw/i2Z8HklELMVSfBrLu5d/bSc6sBMtVkb7z2/OXl1drg/6/7Ev4tnxrcP17sylUy8XNq4/OFFkVWI63ybGevRd+rf6K3M3Fjut08fuHrp5snn/UeP55CBvKY2Pi+NGRDr+xwAAAAAAAAAAAAAAAAAAAOAVV1s4e+T8m42DeXxxOiJ++aKYss/Sme+imLwfOFruT9PBKP/t6cG3ALpPLvxW/eCHtZ/Lofh2pNGOiP3fJhHx+k6fK8W6/fWASIaV+S/9GQAA///p7o1q") creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x10) sendfile(0xffffffffffffffff, r9, 0x0, 0x7ffff019) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000280)) 5.489417947s ago: executing program 2 (id=74): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2000005c, &(0x7f0000000440)=[{0xd64, 0xa, 0x10, 0x7}, {0x3ff, 0x7, 0x2, 0x10001}, {0x2e6c, 0x5, 0xf0, 0x2}, {0x7, 0x4, 0x7f, 0x1}, {0x2, 0x7, 0x5, 0x3ff}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @private2, 0xb851}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x100) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0xaec, 0x5c1, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x65, 0x0, 0x10, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@noop, @noop]}}}}}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240), 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b332abd700000000000150000008c3b300e9b2deefd3a00000010001d800c00008008000d8004000300"], 0x30}}, 0x0) 5.427833862s ago: executing program 4 (id=75): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x80082, &(0x7f00000001c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@dioread_nolock}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x468, &(0x7f0000000a80)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000380)="4176adc3a0", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000024c0), 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x7, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x80, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) 5.19784737s ago: executing program 3 (id=77): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf006e76e8696d0000000f0001006e657464651df7dd4f9267e886ff8d6ba00c97d941a6911482c800000000b75d7ce04f384d87ecff2306cc4cd7000000009d758fa4402197f9b56d79dde773cf7a6ec63cbf69f0b23d51105ea24947457ae120210ee7a88b2e16f636a9d471a7f5bd1e3162773e99"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0573025ee99ead2a6bdb8a88011100", @ANYRES16=r1, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4040}, 0x48010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x23, 0x803, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='workqueue_execute_end\x00', r8}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c00"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 5.07200322s ago: executing program 0 (id=79): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) stat(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r9, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x4000000, 0x6, 0xffff4a2f, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040090) io_uring_setup(0x35, &(0x7f0000000340)={0x0, 0x94f9, 0x2000, 0x0, 0x253}) 5.066763251s ago: executing program 3 (id=80): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000001c0)=ANY=[], 0x1, 0xa5c, &(0x7f0000001240)="$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") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) clock_gettime(0x0, &(0x7f0000001e80)={0x0, 0x0}) io_getevents(r2, 0x3, 0x0, 0x0, &(0x7f0000001ec0)={r3, r4+10000000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001d00)={'nicvf0\x00', 0x1000}) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r6 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) r11 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB="0ffe", @ANYRES64, @ANYBLOB, @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYRESDEC, @ANYBLOB='\b\x00', @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES32=r11, @ANYBLOB="10000400000000"], 0x94, 0x1) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001e00)={r6, r7}, 0xc) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r12, &(0x7f0000000140)='Q', 0x1, 0x200980) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r5, @ANYRES8=r5], 0x10c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 5.005775716s ago: executing program 0 (id=81): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open(0x0, 0x80ff, 0x29c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x300000000000000) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="0b0368002e7e6d2ddc537e5b81ee3e50768cd1006400020047547448980d932229fb3e81e4f8a44234b7883f8ca2681bb5324378d7f617e91ca7abe15353a746c65d71c3c723bb20d494afab5debca18b763239edc3d64b85a2b4dcff57dd46d49e9306bb6a7386a5245e4ccfc231c84c2c1beba4f46cbe852b4f582c456559bd55b82c07b2de9781cd3f7e057d9c96fbec388078ac68f5c076ad3b3f17ac4ec2a77332ee1463132", 0xffffff34, 0x4, &(0x7f0000000140)={0x11, 0x9, r5}, 0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r5, r6, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x9, 0xfd, 0x9, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x44884) ioctl$TCXONC(r1, 0x540a, 0x3) 4.733612327s ago: executing program 3 (id=82): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r0 = inotify_init() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000950000000000e3ffffffffffffff00000000d300"], &(0x7f0000000100)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x32600) 4.691815051s ago: executing program 4 (id=83): socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @loopback, 0x6324}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x20080000) ptrace(0x10, r0) syz_read_part_table(0x5b4, &(0x7f00000005c0)="$eJzs0r9Lm3kcB/BPwuXSgxalFDr0hkJDp7QFO7RDMhRJQ5ZGSq906Cw46CA4OEgkOvvjH1D8BeIi7hlFD0QhTpLxcD5QbnF6jpDHOzk4jhtCEF6vIW/yfT7f5/N9+HyDey0bvydJkomI7s/87XKmF/P/sfuXvcrH2vOxD5+/dLd8j4jKzw/jx79fEEm+lwfp//oPvazlR9obJ6PXe8OnL86PC1vZ9Hkr2+s6+dPt+eDf7ZePhhYWp6tLs+WJi+rc5dvxV5Vny5Wp1XebpcbXp6Vv6QVq9eki/bN/of1+5yypX609ep07bt+M/JrWFTP96c9g7T+MiDvzX3/S7DRvPr3cnXlTfNw5bKykc//D/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7bLx8NLSw+qC7NlicuqnOXb8dfVZ4tV6ZW322WGl+flr5le3WtbD/7T1eXxh9EVOcuC+33O2dJ/Wrt0etc7k5dMRPRpyMwQH/NP71/60+anebNp5e7M2+KjzuHjZVMRCTJoI8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwjlY+152MfPn+JyMT3iBjNDm9315N85LqZSesO0qzne1nLj7Q3Tkav94ZPX5wfF7bG0vVWNmI+IiZ/2x4awOfwP/0ZAAD//4NygM0=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 4.554406092s ago: executing program 2 (id=84): pipe2$9p(0x0, 0x80800) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000800000000000000603100009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x4, 0x1, 0x792f}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000240)=[{0x0, 0x7, 0x0, 0xc28b4459609721d5}, {0x1, 0x2, 0xd, 0x6}, {0x3, 0x4, 0x2, 0x5}, {0x3, 0x5, 0xd, 0x2}], 0x10, 0x400000}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0, 0x4a, 0x0, 0xfffffffd, 0x8ae}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) setitimer(0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000018c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000940)={@broadcast}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r3, &(0x7f00000004c0)=@sco={0x1f, @fixed}, &(0x7f0000000580)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001800)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$team(0x0, r1) 4.485338518s ago: executing program 2 (id=85): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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") socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x218, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x89, 0x3}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x4, @perf_config_ext={0x407fff, 0xae6}, 0x14d45, 0x2e, 0xfffffbff, 0x3, 0x2, 0x100, 0x6, 0x0, 0x0, 0x0, 0xa9ee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4010) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 4.233388338s ago: executing program 2 (id=88): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r4 = getpid() process_vm_writev(r4, &(0x7f0000000300)=[{&(0x7f0000001480)=""/133, 0x85}], 0x1, &(0x7f00000016c0)=[{0x0}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x50) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback, @broadcast}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) 4.223765079s ago: executing program 1 (id=98): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) pselect6(0x40, &(0x7f0000000080)={0xf, 0x10, 0x9, 0x5, 0x9, 0x8, 0x7, 0xf}, &(0x7f00000000c0)={0x5, 0x10001, 0x5, 0x1, 0xd1, 0x80000001, 0xfffffffffffffb48, 0xfffffffffffffff5}, &(0x7f0000000100)={0x8, 0x7fff, 0x4, 0x40, 0x5, 0x5, 0x59d48ae6, 0x2}, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0, 0x0, 0x5}, 0x18) rmdir(0x0) clock_getres(0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "49c7a4f12b34737b", "654bd758d58ea754688637b56c4d6148", "1459948d", "a42849ed7261bdcd"}, 0x28) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r3, r3, 0x0) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4.145213556s ago: executing program 0 (id=89): r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x800, &(0x7f0000000340)={[{@delalloc}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x9}}, {@abort}, {@data_err_ignore}]}, 0x2, 0x48e, &(0x7f0000000ec0)="$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") ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ptrace(0x10, r0) 3.775590365s ago: executing program 4 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_io_uring_setup(0x1fa9, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x503, 0x402, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.295676194s ago: executing program 1 (id=91): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)}], 0x1}}], 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffde0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9, 0xc180}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000008b70383ec72f3bbdd2a49b112000000000000850000001b000052b7000000cc5b0000c2aa35eb00c3e533592f69d1c7c87e307a87197600000000000000002cfbd13b09fa83e9635240c49f42705d09c57b1b9fe87acb20b3665b22f09e5577ec9e809aeaf6ddc3898fa538985f7dc7d92855914a26fa485297a0e3c9d1cdc416bc40d198a3f8940de21a34792171331825eb94e48fd472"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f00000004c0)={0x0, 0x8000000000000001}) write$eventfd(r5, &(0x7f0000000140)=0x7, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000002dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x2, 0x2}, {0x3, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x2e, 0x30]}}, &(0x7f0000002e40)=""/217, 0x45, 0xd9, 0x1, 0x6}, 0x28) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 3.203533181s ago: executing program 2 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.191330042s ago: executing program 4 (id=93): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x3, 0x44a, [0x200000000a00, 0x0, 0x0, 0x200000000b96, 0x200000000bc6], 0x0, &(0x7f0000000300), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x40, 0x88f5, 'wlan0\x00', 'geneve0\x00', 'virt_wifi0\x00', 'geneve1\x00', @remote, [0xff, 0xff], @random="a578547b2b96", [0xff, 0xff, 0xff, 0xff, 0xff], 0x12e, 0x12e, 0x166, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xff000000, 0xff, 0xffffffff], [0xff, 0x0, 0xff, 0xffffff00], 0x7f, 0x84, 0x17, 0x4, 0x4e20, 0x4e22, 0x4e23, 0x4e24}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff000000, 0x9, 0x29, 0x0, 0x16, 0x4e20, 0x4e22, 0x4e20, 0x4e24}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x2, 0x8863, 'wg1\x00', 'veth0_to_batadv\x00', 'macvlan0\x00', 'pimreg\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xae, 0xfe, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x2, 0x7, 0x7}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0xad}}}}], @common=@log={'log\x00', 0x28, {{0x2, "7090146364987c16e8875da53684e30b35fee0cf19dadb4f0adbd2a24887", 0x1}}}}, {0x5, 0x10, 0x0, 'vlan0\x00', 'veth1\x00', 'veth0\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xd6, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 0xfffffffffffffffd}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x4c2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000080)="dccfb93097e7a219f006890c92b8b16d99bc7c8af5ba65283ff441da68d2e7761627f96553a7c19d96bb3a1f2a525953734bc52d819da9260a5f6badc5f453de04ea87622a213c578c8afab8960b7c26d12fd94c415c9fd736cd1deacf88da374b1e048b6bc54033f776532ef69f942df2d67e0d82e19f541b95ff5452b60014404a7c41a0104e76293fb4d9fbc657bde4dc192562a43bdc4b9c1ae68aa72ceac7bedcee68929f8f35fc826cb011c062f14b6b86c1d9c6ec786850d4d575fb00a2ff81e8de8d", &(0x7f00000001c0)=""/179, 0x4}, 0x20) 3.09162669s ago: executing program 0 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r3, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000600)={&(0x7f0000000440)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000480)={&(0x7f0000000580)="2700542b654c7ea08695fabf5f39fd0730baf6105a5565d3e0aac1f54f1482256876f7ffb80fe291e53d2361ade66abe17359d56582a13fd3df850fa83ac9a1c2da281e8cdae0d342766c7ae955a121e4e141b1478eaada095f48187b68663", 0x5f}, 0x1, 0x0, 0x0, 0x4000}, 0x6008014) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000200)='kmem_cache_free\x00', r5, 0x0, 0x6}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) 3.09032245s ago: executing program 3 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(0x0, 0x4827e, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x94, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xe0, 0x8, 0x8000, 0x91d0}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x40, 0x3, 0x4, 0x0, {0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x97}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PBSS={0x4}]}, 0x94}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x4000054) 2.858619279s ago: executing program 0 (id=96): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x61, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@prjquota}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@nobh}, {@nomblk_io_submit}, {@nombcache}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x503, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x37, 0x1, 0x0, 0xfe, 0x0, 0x80, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x6}, 0x4c58, 0x10000, 0x0, 0x1, 0x6, 0x8, 0xb, 0x0, 0xef, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) close(r1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) r4 = memfd_secret(0x80000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r5, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 2.788466085s ago: executing program 1 (id=97): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="d22380e77b0061f1b25541bf51625304b3dde9bdf83456a41dec3901577335c29396674e0ab36ff816c90e346563239c6dcb5a312fdbb787d8eb3333564601bfc060d166ebd4cf4b7899b2e9472755b09b6601dbd02e475c6fd20ff2172c05cbc28b122c2f0d78399f7110a573475cf8fe7de9aed07adf058a2519632ab256f22272666750517fc7bbcbb324a1d98e84b5047a43fabb3dee7a89bbd349f68e4cb2bde3675af5f034798e8ed5c57cb5d0e945a782bb3ab4c3afc8a8027ad98c4f35bebdb06648ce6edcead3331e76ed5f3d63964346626155f5954a1259f5ef8b2199cf641e02b2c6", @ANYRES64, @ANYBLOB="d535cd0775cd812bdd4c6926a6669a0cb9c5d5a1c36aaccacd1ba7fb7eb7a95a2e2ad8401f555fcce2fe050ff1feb6c2aa35ed5eb740fb7b80", @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRES64], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x7, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.314680294s ago: executing program 1 (id=99): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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") socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x1}, 0x218, 0x7, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x89, 0x3}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x4, @perf_config_ext={0x407fff, 0xae6}, 0x14d45, 0x2e, 0xfffffbff, 0x3, 0x2, 0x100, 0x6, 0x0, 0x0, 0x0, 0xa9ee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4010) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.314171674s ago: executing program 4 (id=100): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a3200000000050004000000000014000780080012400000000005001500220000000500050002000000050001"], 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x9, 0x7, 0xffff0001, 0x0, r6, 0x7, '\x00', r8, r9, 0x2, 0x0, 0x4, 0x4}, 0x50) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) connect$inet6(r0, 0x0, 0x0) 1.002422709s ago: executing program 1 (id=101): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) stat(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r9, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r9, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x0, 0x4000000, 0x6, 0xffff4a2f, 0x8]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040090) io_uring_setup(0x35, &(0x7f0000000340)={0x0, 0x94f9, 0x2000, 0x0, 0x253}) 470.822512ms ago: executing program 3 (id=102): r0 = socket$kcm(0x1e, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0x4, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffb, 0x7fff, 0x7, 0x18000000, 0x4}, 0x7, 0x1, 0x3, 0x9c3f, 0x4, 0x15, 0x20, 0x0, 0x8, 0x7ff, {0x7, 0x1000, 0x9, 0x40000000, 0x4, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0xdc}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0xf) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="cbeb23f28819838522871e32625642d05f96c90e101f6a56e0670d1c4c3e335f4a280a0dcea403e96c8b01ccc77072b14b0be026d7693a79d18d99f33351213a5eed8dd5df216d3ba6b2cfc4926b0d60c8a1ed4a395547fac887cf62c4f0b2da6d2389ed71dea4d4eec3397b2f67785b59df5930ae7d1b5ae99394d66b99156f6f0f52d35f5a794104d4162279b9bd1c4e8d4bf7af0828692b37b5b66d949de6e20f225e7ade48a9d441e3fa5655dbc11d1311819030f68e16ba37a38858fee40b7368a0e9329a9dfd69de9c00"/225, 0xe1}], 0x1}, 0x40004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000ec8500000050000000850000000f000000950000000000f50ec01aa48828a4dfe9c594934dd6e0b829ff308733532c2a7cb7ca0b19c63493a4bdb102309d7281ff3954ce15be2ab0a1896495703e22ef494e0d48d6afb088a187d6698473451cb134ef3ae1ed2d83af3f4d24146cb2ec6cdc8a30bd2941c377f26c0676558ca4e0df7a3fd2571d248c30cd3a7256a5bf311e1c7db3b81ff94756bdd9116c69723497a19175856cfdbf7e4fd7ba4da20f1233475208f94d67908fa9789a6fe17fa42b627a11aed524b030b6e6a586dbfd5f1cf8f4c003c747712644236a79b45d8b0e1641e176392f9293478aa4efd9f7a572bf617e321ceed775d02645258e4ff44d54bbc87fd9838add3476f25755818331a236165e13dffc20fb355d1fbb255c96b1010eaaad0377c91931a467427ddcaa30f9b98eeca0729fad2a58402b78"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu<=0||!') 450.914593ms ago: executing program 0 (id=103): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r5}, 0x10) r6 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r6, 0x7) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r7, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r7, r0, 0x0, 0x3ffff) sendfile(r7, r0, 0x0, 0x7fffeffd) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 93.464182ms ago: executing program 3 (id=104): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x32600) 0s ago: executing program 1 (id=105): add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) clock_getres(0xeaffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x2, 0x8}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002, 0x5}, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 20.331211][ T29] audit: type=1400 audit(1756607684.880:62): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.332029][ T3248] cgroup: Unknown subsys name 'net' [ 20.353921][ T29] audit: type=1400 audit(1756607684.880:63): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.381255][ T29] audit: type=1400 audit(1756607684.910:64): avc: denied { unmount } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.520223][ T3248] cgroup: Unknown subsys name 'cpuset' [ 20.526284][ T3248] cgroup: Unknown subsys name 'rlimit' [ 20.694952][ T29] audit: type=1400 audit(1756607685.240:65): avc: denied { setattr } for pid=3248 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.718200][ T29] audit: type=1400 audit(1756607685.240:66): avc: denied { create } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.738695][ T29] audit: type=1400 audit(1756607685.240:67): avc: denied { write } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.759084][ T29] audit: type=1400 audit(1756607685.240:68): avc: denied { read } for pid=3248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.779415][ T29] audit: type=1400 audit(1756607685.260:69): avc: denied { mounton } for pid=3248 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.787033][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.804188][ T29] audit: type=1400 audit(1756607685.260:70): avc: denied { mount } for pid=3248 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.835951][ T29] audit: type=1400 audit(1756607685.370:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 20.926172][ T3248] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.873316][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 22.929988][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.937049][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.944227][ T3303] bridge_slave_0: entered allmulticast mode [ 22.950900][ T3303] bridge_slave_0: entered promiscuous mode [ 22.965787][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.972889][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.980073][ T3303] bridge_slave_1: entered allmulticast mode [ 22.986480][ T3303] bridge_slave_1: entered promiscuous mode [ 23.021493][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.036061][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.071535][ T3303] team0: Port device team_slave_0 added [ 23.084930][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.101518][ T3303] team0: Port device team_slave_1 added [ 23.139781][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.146790][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.172749][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.196339][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.203367][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.229266][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.256755][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 23.268646][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.275734][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.282948][ T3305] bridge_slave_0: entered allmulticast mode [ 23.289499][ T3305] bridge_slave_0: entered promiscuous mode [ 23.297714][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.304898][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.312122][ T3305] bridge_slave_1: entered allmulticast mode [ 23.318474][ T3305] bridge_slave_1: entered promiscuous mode [ 23.340959][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 23.361253][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.385474][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.396649][ T3303] hsr_slave_0: entered promiscuous mode [ 23.402646][ T3303] hsr_slave_1: entered promiscuous mode [ 23.440863][ T3305] team0: Port device team_slave_0 added [ 23.457600][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 23.466459][ T3305] team0: Port device team_slave_1 added [ 23.472176][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.479200][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.486405][ T3306] bridge_slave_0: entered allmulticast mode [ 23.492865][ T3306] bridge_slave_0: entered promiscuous mode [ 23.519542][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.526655][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.533800][ T3306] bridge_slave_1: entered allmulticast mode [ 23.540036][ T3306] bridge_slave_1: entered promiscuous mode [ 23.553406][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.560539][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.567619][ T3313] bridge_slave_0: entered allmulticast mode [ 23.574384][ T3313] bridge_slave_0: entered promiscuous mode [ 23.582739][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.589865][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.597037][ T3313] bridge_slave_1: entered allmulticast mode [ 23.604264][ T3313] bridge_slave_1: entered promiscuous mode [ 23.621055][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.644664][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.651628][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.677543][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.689223][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.709399][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.716353][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.742288][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.764551][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.795223][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.804823][ T3306] team0: Port device team_slave_0 added [ 23.821502][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.828545][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.835740][ T3324] bridge_slave_0: entered allmulticast mode [ 23.842077][ T3324] bridge_slave_0: entered promiscuous mode [ 23.853350][ T3306] team0: Port device team_slave_1 added [ 23.870986][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.878139][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.885451][ T3324] bridge_slave_1: entered allmulticast mode [ 23.891838][ T3324] bridge_slave_1: entered promiscuous mode [ 23.903356][ T3313] team0: Port device team_slave_0 added [ 23.912937][ T3305] hsr_slave_0: entered promiscuous mode [ 23.918900][ T3305] hsr_slave_1: entered promiscuous mode [ 23.924873][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 23.930614][ T3305] Cannot create hsr debugfs directory [ 23.945434][ T3313] team0: Port device team_slave_1 added [ 23.963712][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.973059][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.980078][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.005986][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.025931][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.032951][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.058879][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.075427][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.089301][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.096265][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.122219][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.135339][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.142303][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.168216][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.199153][ T3324] team0: Port device team_slave_0 added [ 24.206013][ T3324] team0: Port device team_slave_1 added [ 24.234246][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.254967][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.261959][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.287930][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.298934][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.305948][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.331886][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.342820][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.353500][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.364171][ T3306] hsr_slave_0: entered promiscuous mode [ 24.370283][ T3306] hsr_slave_1: entered promiscuous mode [ 24.376041][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 24.381789][ T3306] Cannot create hsr debugfs directory [ 24.398141][ T3313] hsr_slave_0: entered promiscuous mode [ 24.404124][ T3313] hsr_slave_1: entered promiscuous mode [ 24.410091][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 24.415812][ T3313] Cannot create hsr debugfs directory [ 24.421495][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.477467][ T3324] hsr_slave_0: entered promiscuous mode [ 24.484369][ T3324] hsr_slave_1: entered promiscuous mode [ 24.490215][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 24.495913][ T3324] Cannot create hsr debugfs directory [ 24.609787][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.618380][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.628307][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.639161][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.671936][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.684726][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.692962][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.702514][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.711023][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.737060][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.747242][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.757640][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.774037][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.783852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.790926][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.799496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.806551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.820497][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.860995][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.878160][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.895222][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.904036][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.914349][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.942918][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.962603][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.969773][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.985882][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.992946][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.012934][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.023568][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.032409][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.046569][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.065425][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072544][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.087139][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.094949][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.101993][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.125895][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.132976][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.152421][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.159527][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.172642][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.195366][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.226428][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.237190][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.261321][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.268386][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.281931][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.289017][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.338728][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.349199][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.381320][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.392276][ T3303] veth0_vlan: entered promiscuous mode [ 25.401668][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.415601][ T3303] veth1_vlan: entered promiscuous mode [ 25.434437][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.449618][ T3303] veth0_macvtap: entered promiscuous mode [ 25.471337][ T3303] veth1_macvtap: entered promiscuous mode [ 25.486500][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.517500][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.531845][ T2878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.556690][ T3305] veth0_vlan: entered promiscuous mode [ 25.564317][ T2878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.585870][ T3305] veth1_vlan: entered promiscuous mode [ 25.597971][ T2878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.611022][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 25.611034][ T29] audit: type=1400 audit(1756607690.160:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.1b0fRp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.616990][ T3305] veth0_macvtap: entered promiscuous mode [ 25.633257][ T29] audit: type=1400 audit(1756607690.170:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 25.651547][ T3324] veth0_vlan: entered promiscuous mode [ 25.668917][ T29] audit: type=1400 audit(1756607690.180:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.1b0fRp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.679919][ T3324] veth1_vlan: entered promiscuous mode [ 25.699500][ T29] audit: type=1400 audit(1756607690.180:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 25.709367][ T2878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.726593][ T29] audit: type=1400 audit(1756607690.180:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.1b0fRp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 25.746625][ T3306] veth0_vlan: entered promiscuous mode [ 25.761893][ T29] audit: type=1400 audit(1756607690.180:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.1b0fRp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 25.771445][ T3305] veth1_macvtap: entered promiscuous mode [ 25.794585][ T29] audit: type=1400 audit(1756607690.180:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.808461][ T3313] veth0_vlan: entered promiscuous mode [ 25.827478][ T29] audit: type=1400 audit(1756607690.230:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 25.842086][ T3306] veth1_vlan: entered promiscuous mode [ 25.850360][ T29] audit: type=1400 audit(1756607690.230:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 25.866817][ T3324] veth0_macvtap: entered promiscuous mode [ 25.890407][ T3324] veth1_macvtap: entered promiscuous mode [ 25.899072][ T3313] veth1_vlan: entered promiscuous mode [ 25.899201][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.905930][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.938137][ T3306] veth0_macvtap: entered promiscuous mode [ 25.945943][ T3306] veth1_macvtap: entered promiscuous mode [ 25.954036][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.969330][ T29] audit: type=1400 audit(1756607690.510:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.999092][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.015636][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.031950][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.042391][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.051306][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.060202][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.069427][ T3313] veth0_macvtap: entered promiscuous mode [ 26.086850][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.096394][ T3313] veth1_macvtap: entered promiscuous mode [ 26.127723][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.154036][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.163562][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.182623][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.194934][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.229062][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.239797][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.282689][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.312771][ T3476] veth0_to_team: entered promiscuous mode [ 26.340538][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.374217][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.396197][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.406666][ T3491] netlink: 'syz.4.6': attribute type 1 has an invalid length. [ 26.416069][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.436663][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.455517][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.465041][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.588500][ T3501] loop2: detected capacity change from 0 to 512 [ 26.610222][ T3501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.622992][ T3501] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 26.665823][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 26.665836][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.791641][ T3511] atomic_op ffff88811e324d28 conn xmit_atomic 0000000000000000 [ 27.037120][ T3514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 27.142376][ T3472] syz.1.2 (3472) used greatest stack depth: 10080 bytes left [ 27.155045][ T3517] sd 0:0:1:0: device reset [ 27.343128][ T3525] process 'syz.4.15' launched '/dev/fd/5' with NULL argv: empty string added [ 27.735717][ T3532] lo speed is unknown, defaulting to 1000 [ 27.742321][ T3532] lo speed is unknown, defaulting to 1000 [ 27.748345][ T3532] lo speed is unknown, defaulting to 1000 [ 27.800835][ T3532] infiniband sz1: set active [ 27.805525][ T3532] infiniband sz1: added lo [ 27.814920][ T3399] lo speed is unknown, defaulting to 1000 [ 27.883349][ T3532] RDS/IB: sz1: added [ 27.887406][ T3532] smc: adding ib device sz1 with port count 1 [ 27.893592][ T3532] smc: ib device sz1 port 1 has pnetid [ 27.899966][ T3532] lo speed is unknown, defaulting to 1000 [ 27.954452][ T3532] lo speed is unknown, defaulting to 1000 [ 28.007150][ T3532] lo speed is unknown, defaulting to 1000 [ 28.040802][ T3532] lo speed is unknown, defaulting to 1000 [ 28.070065][ T3399] lo speed is unknown, defaulting to 1000 [ 28.088301][ T3532] lo speed is unknown, defaulting to 1000 [ 28.218595][ T3542] loop4: detected capacity change from 0 to 512 [ 28.242245][ T3542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.254931][ T3542] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.440669][ T3549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3549 comm=syz.3.21 [ 28.457587][ T3549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.532482][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.694397][ T3514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.067350][ T3562] loop1: detected capacity change from 0 to 128 [ 29.129475][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 29.350692][ C1] hrtimer: interrupt took 27799 ns [ 29.427919][ T3571] syzkaller0: entered promiscuous mode [ 29.436338][ T3571] syzkaller0: entered allmulticast mode [ 29.668274][ T3576] loop0: detected capacity change from 0 to 512 [ 29.668745][ T3514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.679586][ T3576] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.28: casefold flag without casefold feature [ 29.697691][ T3576] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.28: couldn't read orphan inode 15 (err -117) [ 29.711400][ T3576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.740337][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.752237][ T3549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.777485][ T3514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.810001][ T3549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.834542][ T2003] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.849757][ T2003] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.849834][ T2003] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.849888][ T2003] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.870344][ T3549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.896659][ T3582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 29.905517][ T3582] netlink: 108 bytes leftover after parsing attributes in process `syz.0.30'. [ 29.915844][ T3582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 29.925646][ T3582] netlink: 108 bytes leftover after parsing attributes in process `syz.0.30'. [ 29.934622][ T3582] netlink: 84 bytes leftover after parsing attributes in process `syz.0.30'. [ 29.943695][ T3584] loop2: detected capacity change from 0 to 512 [ 29.963030][ T3584] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm +}[@: error while reading EA inode 32 err=-116 [ 29.974190][ T2878] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.983690][ T3584] EXT4-fs (loop2): Remounting filesystem read-only [ 29.983705][ T3584] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.983727][ T3584] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 29.983752][ T3584] EXT4-fs (loop2): 1 orphan inode deleted [ 29.984311][ T3584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.009173][ T2878] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.009203][ T2878] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.009354][ T2878] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.017349][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.045584][ T3594] loop3: detected capacity change from 0 to 512 [ 30.095601][ T3594] ======================================================= [ 30.095601][ T3594] WARNING: The mand mount option has been deprecated and [ 30.095601][ T3594] and is ignored by this kernel. Remove the mand [ 30.095601][ T3594] option from the mount to silence this warning. [ 30.095601][ T3594] ======================================================= [ 30.131320][ T3596] loop1: detected capacity change from 0 to 512 [ 30.155068][ T3596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.165628][ T3594] EXT4-fs (loop3): orphan cleanup on readonly fs [ 30.168209][ T3596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.189289][ T3594] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.33: bad orphan inode 13 [ 30.203338][ T3600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.215206][ T3596] EXT4-fs (loop1): 1 truncate cleaned up [ 30.221596][ T3596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.239540][ T3594] ext4_test_bit(bit=12, block=18) = 1 [ 30.245002][ T3594] is_bad_inode(inode)=0 [ 30.249170][ T3594] NEXT_ORPHAN(inode)=2130706432 [ 30.254130][ T3594] max_ino=32 [ 30.257349][ T3594] i_nlink=1 [ 30.288835][ T3605] loop0: detected capacity change from 0 to 512 [ 30.289740][ T3594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.312982][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.330919][ T3600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.392032][ T3605] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 30.403416][ T3605] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.35: invalid indirect mapped block 8 (level 2) [ 30.431315][ T3605] EXT4-fs (loop0): Remounting filesystem read-only [ 30.437885][ T3605] EXT4-fs (loop0): 1 truncate cleaned up [ 30.471126][ T3605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.486760][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.499378][ T3600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.541709][ T3605] EXT4-fs: Cannot specify journal on remount [ 30.603990][ T3600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.619991][ T29] kauditd_printk_skb: 1220 callbacks suppressed [ 30.620003][ T29] audit: type=1400 audit(1756607695.170:1311): avc: denied { read } for pid=3615 comm="syz.3.39" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 30.649329][ T29] audit: type=1400 audit(1756607695.170:1312): avc: denied { open } for pid=3615 comm="syz.3.39" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 30.699133][ T29] audit: type=1400 audit(1756607695.240:1313): avc: denied { setopt } for pid=3615 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.784183][ T3622] loop4: detected capacity change from 0 to 2364 [ 30.787628][ T3624] lo speed is unknown, defaulting to 1000 [ 30.808438][ T3626] netlink: 'syz.2.40': attribute type 13 has an invalid length. [ 30.821549][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.822327][ T29] audit: type=1400 audit(1756607695.370:1314): avc: denied { write } for pid=3621 comm="syz.4.41" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.957500][ T29] audit: type=1400 audit(1756607695.500:1315): avc: denied { read } for pid=3627 comm="syz.3.42" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 30.980088][ T29] audit: type=1400 audit(1756607695.500:1316): avc: denied { open } for pid=3627 comm="syz.3.42" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 31.808538][ T3636] vhci_hcd vhci_hcd.0: failed to lookup sock [ 31.815767][ T3629] loop1: detected capacity change from 0 to 128 [ 31.866558][ T3629] syz.1.38: attempt to access beyond end of device [ 31.866558][ T3629] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 32.276156][ T3640] loop3: detected capacity change from 0 to 512 [ 32.322082][ T3640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.43: bg 0: block 131: padding at end of block bitmap is not set [ 32.354400][ T3626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.363809][ T3640] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 32.370291][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.387291][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.412103][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.417283][ T3640] EXT4-fs (loop3): 1 truncate cleaned up [ 32.426407][ T3640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.451969][ T29] audit: type=1326 audit(1756607697.000:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baac0ebe9 code=0x7ffc0000 [ 32.475838][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.477212][ T29] audit: type=1326 audit(1756607697.030:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baac0ebe9 code=0x7ffc0000 [ 32.508096][ T29] audit: type=1326 audit(1756607697.030:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3baac0ebe9 code=0x7ffc0000 [ 32.531324][ T29] audit: type=1326 audit(1756607697.030:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3baac0ebe9 code=0x7ffc0000 [ 32.562566][ T3650] loop0: detected capacity change from 0 to 128 [ 32.611598][ T3650] syz.0.47: attempt to access beyond end of device [ 32.611598][ T3650] loop0: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 32.632164][ T3651] loop2: detected capacity change from 0 to 2048 [ 32.638872][ T3650] syz.0.47: attempt to access beyond end of device [ 32.638872][ T3650] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 32.652142][ T3650] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 32.662680][ T3650] syz.0.47: attempt to access beyond end of device [ 32.662680][ T3650] loop0: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 32.676348][ T3650] syz.0.47: attempt to access beyond end of device [ 32.676348][ T3650] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 32.689717][ T3650] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 32.700101][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.702527][ T3650] syz.0.47: attempt to access beyond end of device [ 32.702527][ T3650] loop0: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 32.731960][ T3295] Alternate GPT is invalid, using primary GPT. [ 32.738341][ T3295] loop2: p2 p3 p7 [ 32.750538][ T3650] syz.0.47: attempt to access beyond end of device [ 32.750538][ T3650] loop0: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 32.763823][ T3650] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 32.769564][ T3657] loop3: detected capacity change from 0 to 2048 [ 32.773711][ T3650] syz.0.47: attempt to access beyond end of device [ 32.773711][ T3650] loop0: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 32.793401][ T3651] Alternate GPT is invalid, using primary GPT. [ 32.799945][ T3651] loop2: p2 p3 p7 [ 32.799976][ T3658] loop1: detected capacity change from 0 to 512 [ 32.812094][ T3650] syz.0.47: attempt to access beyond end of device [ 32.812094][ T3650] loop0: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 32.825440][ T3650] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 32.839232][ T3650] syz.0.47: attempt to access beyond end of device [ 32.839232][ T3650] loop0: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 32.853755][ T3650] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 32.854945][ T2995] Alternate GPT is invalid, using primary GPT. [ 32.863024][ T3650] Buffer I/O error on dev loop0, logical block 116, lost async page write [ 32.868728][ T2995] loop2: p2 p3 p7 [ 32.884262][ T3650] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 32.894742][ T3658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.907923][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.908800][ T3650] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 32.921589][ T3658] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.955433][ T3657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 32.964581][ T3657] IPVS: Error connecting to the multicast addr [ 32.973507][ T3658] netlink: 'syz.1.49': attribute type 13 has an invalid length. [ 33.022130][ T3650] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 33.044223][ T3657] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.48: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.074956][ T3650] Buffer I/O error on dev loop0, logical block 124, lost async page write [ 33.085955][ T3663] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.49: iget: bad i_size value: 2533274857506816 [ 33.165033][ T3663] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.49: iget: bad i_size value: 2533274857506816 [ 33.335348][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.462270][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.463636][ T3675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 33.469588][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.496973][ T3680] loop4: detected capacity change from 0 to 1024 [ 33.524879][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.724621][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.752957][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.880366][ T3680] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.53'. [ 33.890429][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.902671][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.914174][ T3689] Zero length message leads to an empty skb [ 33.936700][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.946012][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.955870][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.981182][ T3702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.56'. [ 33.996436][ T3702] loop0: detected capacity change from 0 to 1024 [ 34.002202][ T3704] netlink: 196 bytes leftover after parsing attributes in process `syz.1.55'. [ 34.006845][ T3702] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 34.049911][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.063830][ T3706] loop0: detected capacity change from 0 to 512 [ 34.081202][ T3706] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.57: casefold flag without casefold feature [ 34.116002][ T3706] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.57: couldn't read orphan inode 15 (err -117) [ 34.135367][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.162125][ T3711] loop1: detected capacity change from 0 to 512 [ 34.181991][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.203044][ T3711] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.59: bg 0: block 131: padding at end of block bitmap is not set [ 34.361461][ T3711] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 34.400649][ T3711] EXT4-fs (loop1): 1 truncate cleaned up [ 34.410997][ T3711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.525035][ T3720] lo speed is unknown, defaulting to 1000 [ 35.112244][ T3726] tipc: Started in network mode [ 35.117229][ T3726] tipc: Node identity f69c3802e781, cluster identity 4711 [ 35.124450][ T3726] tipc: Enabled bearer , priority 0 [ 35.132628][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.187381][ T3726] syzkaller0: entered promiscuous mode [ 35.192903][ T3726] syzkaller0: entered allmulticast mode [ 35.207676][ T3728] loop2: detected capacity change from 0 to 512 [ 35.300965][ T3728] EXT4-fs (loop2): 1 orphan inode deleted [ 35.307684][ T3728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.320542][ T3728] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.382832][ T3731] smc: net device bond0 applied user defined pnetid SYZ0 [ 35.418041][ T3726] tipc: Resetting bearer [ 35.476737][ T3726] tipc: Enabling of bearer rejected, already enabled [ 35.564347][ T3726] +: renamed from syzkaller0 (while UP) [ 35.572065][ T3726] tipc: Disabling bearer [ 35.645813][ T3746] loop0: detected capacity change from 0 to 1024 [ 35.659107][ T3747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.66'. [ 35.672910][ T3748] loop3: detected capacity change from 0 to 512 [ 35.683411][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 35.683425][ T29] audit: type=1326 audit(1756607700.230:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.697966][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.712989][ T29] audit: type=1326 audit(1756607700.230:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.749912][ T29] audit: type=1326 audit(1756607700.230:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.773209][ T29] audit: type=1326 audit(1756607700.230:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.796531][ T29] audit: type=1326 audit(1756607700.230:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.819667][ T29] audit: type=1326 audit(1756607700.230:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.842983][ T29] audit: type=1326 audit(1756607700.230:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.866243][ T29] audit: type=1326 audit(1756607700.230:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.889588][ T29] audit: type=1326 audit(1756607700.230:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.912757][ T29] audit: type=1326 audit(1756607700.230:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84307ebe9 code=0x7ffc0000 [ 35.981671][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.005830][ T3748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.028761][ T3748] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.045359][ T3746] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.69'. [ 36.092940][ T3758] loop4: detected capacity change from 0 to 1024 [ 36.093206][ T3748] netlink: 'syz.3.68': attribute type 13 has an invalid length. [ 36.115976][ T3758] ext3: Unknown parameter 'subj_role' [ 36.123582][ T3760] loop2: detected capacity change from 0 to 512 [ 36.159134][ T3760] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.169243][ T3758] loop4: detected capacity change from 0 to 2048 [ 36.184475][ T3761] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.68: iget: bad i_size value: 2533274857506816 [ 36.197901][ T3760] EXT4-fs (loop2): 1 truncate cleaned up [ 36.201801][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.210786][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.211977][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.230996][ T3294] loop4: p1 < > p4 [ 36.244951][ T3294] loop4: p4 size 8388608 extends beyond EOD, truncated [ 36.245344][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.266517][ T3758] loop4: p1 < > p4 [ 36.270060][ T3764] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.68: iget: bad i_size value: 2533274857506816 [ 36.283647][ T3758] loop4: p4 size 8388608 extends beyond EOD, truncated [ 36.323201][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.339074][ T2995] loop4: p1 < > p4 [ 36.357387][ T2995] loop4: p4 size 8388608 extends beyond EOD, truncated [ 36.385528][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 36.386941][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.395905][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 36.406642][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.429258][ T3773] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 36.434939][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 36.449670][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 36.492414][ T3780] loop4: detected capacity change from 0 to 512 [ 36.506804][ T3780] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.526327][ T3780] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.75: invalid indirect mapped block 8 (level 2) [ 36.542015][ T3782] serio: Serial port ttyS3 [ 36.543517][ T3780] EXT4-fs (loop4): Remounting filesystem read-only [ 36.553276][ T3780] EXT4-fs (loop4): 1 truncate cleaned up [ 36.559314][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.584166][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.584285][ T3772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.607834][ T3787] loop9: detected capacity change from 0 to 7 [ 36.613580][ T3784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 36.614299][ T3787] loop9: unable to read partition table [ 36.629005][ T3787] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 36.629005][ T3787] ) failed (rc=-5) [ 36.653780][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.664149][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.668635][ T3776] EXT4-fs: Cannot specify journal on remount [ 36.674085][ T3787] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 36.702718][ T3772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.721078][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.745678][ T3793] smc: net device bond0 erased user defined pnetid SYZ0 [ 36.765615][ T3791] loop3: detected capacity change from 0 to 1764 [ 36.778957][ T3772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.793289][ T57] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.806014][ T3791] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 36.816226][ T3791] lo speed is unknown, defaulting to 1000 [ 36.822911][ T3791] lo speed is unknown, defaulting to 1000 [ 36.829126][ T3791] lo speed is unknown, defaulting to 1000 [ 36.836171][ T3791] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.844709][ T3772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.845903][ T3791] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 36.873732][ T3791] lo speed is unknown, defaulting to 1000 [ 36.880956][ T3791] lo speed is unknown, defaulting to 1000 [ 36.887191][ T3791] lo speed is unknown, defaulting to 1000 [ 36.893460][ T3791] lo speed is unknown, defaulting to 1000 [ 36.899460][ T3791] lo speed is unknown, defaulting to 1000 [ 36.914150][ T2003] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.929302][ T2003] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.940383][ T2003] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.948651][ T2003] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.059855][ T3800] loop3: detected capacity change from 0 to 512 [ 37.068934][ T3800] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.082085][ T3800] EXT4-fs (loop3): 1 truncate cleaned up [ 37.089479][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.098765][ T3800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.234726][ T3805] loop4: detected capacity change from 0 to 2048 [ 37.264677][ T3808] syz.2.84 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.315219][ T3811] loop2: detected capacity change from 0 to 1024 [ 37.345894][ T3811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.406332][ T3811] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.85'. [ 37.549266][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.627680][ T3825] loop2: detected capacity change from 0 to 512 [ 37.650663][ T3827] loop0: detected capacity change from 0 to 512 [ 37.669335][ T3825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.675691][ T3827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0103] [ 37.692079][ T3825] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.699080][ T3827] System zones: 1-12 [ 37.707177][ T3827] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.89: error while reading EA inode 32 err=-116 [ 37.729900][ T3827] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.89: error while reading EA inode 32 err=-116 [ 37.742864][ T3827] EXT4-fs (loop0): 1 orphan inode deleted [ 37.748972][ T3827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.753270][ T3825] netlink: 'syz.2.88': attribute type 13 has an invalid length. [ 37.805634][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.812833][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.821284][ T3833] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.88: iget: bad i_size value: 2533274857506816 [ 37.885060][ T3833] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.88: iget: bad i_size value: 2533274857506816 [ 38.054654][ T3837] loop9: detected capacity change from 0 to 7 [ 38.088297][ T3295] buffer_io_error: 11 callbacks suppressed [ 38.088312][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.128537][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.136424][ T3295] loop9: unable to read partition table [ 38.151071][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.180859][ T3825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.268940][ T3837] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.300477][ T3837] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.308313][ T3837] loop9: unable to read partition table [ 38.317404][ T3837] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 38.317404][ T3837] ) failed (rc=-5) [ 38.322181][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.338780][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.349026][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.357218][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.366606][ T3295] Buffer I/O error on dev loop9, logical block 0, async page read [ 38.462145][ T3824] 9pnet_fd: p9_fd_create_tcp (3824): problem connecting socket to 127.0.0.1 [ 38.492654][ T57] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.505763][ T3840] netlink: 'syz.4.90': attribute type 4 has an invalid length. [ 38.517993][ T3842] loop1: detected capacity change from 0 to 128 [ 38.568911][ T57] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.580304][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.590662][ T3843] bio_check_eod: 19 callbacks suppressed [ 38.590676][ T3843] syz.1.91: attempt to access beyond end of device [ 38.590676][ T3843] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 38.597482][ T57] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.624700][ T3845] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 38.635619][ T3843] syz.1.91: attempt to access beyond end of device [ 38.635619][ T3843] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 38.649174][ T57] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.664055][ T3845] mmap: syz.4.93 (3845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.674003][ T3843] syz.1.91: attempt to access beyond end of device [ 38.674003][ T3843] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 38.693761][ T3847] tipc: Started in network mode [ 38.698629][ T3847] tipc: Node identity da40fe1ea0ea, cluster identity 4711 [ 38.705810][ T3847] tipc: Enabled bearer , priority 0 [ 38.713818][ T3843] syz.1.91: attempt to access beyond end of device [ 38.713818][ T3843] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 38.714212][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.727867][ T3847] syzkaller0: entered promiscuous mode [ 38.737692][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.741504][ T3847] syzkaller0: entered allmulticast mode [ 38.771652][ T3843] syz.1.91: attempt to access beyond end of device [ 38.771652][ T3843] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 38.775303][ T3849] netlink: 'syz.0.94': attribute type 3 has an invalid length. [ 38.802925][ T3847] tipc: Resetting bearer [ 38.809791][ T3847] tipc: Enabling of bearer rejected, already enabled [ 38.819783][ T3847] +: renamed from syzkaller0 (while UP) [ 38.829031][ T3847] tipc: Disabling bearer [ 38.843793][ T3843] syz.1.91: attempt to access beyond end of device [ 38.843793][ T3843] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 38.857197][ T3843] syz.1.91: attempt to access beyond end of device [ 38.857197][ T3843] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 38.890125][ T3843] syz.1.91: attempt to access beyond end of device [ 38.890125][ T3843] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 38.903598][ T3843] syz.1.91: attempt to access beyond end of device [ 38.903598][ T3843] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 38.917262][ T3843] syz.1.91: attempt to access beyond end of device [ 38.917262][ T3843] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 38.958764][ T3855] loop0: detected capacity change from 0 to 512 [ 38.968712][ T3855] EXT4-fs: Ignoring removed nobh option [ 38.974443][ T3855] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.982600][ T3855] EXT4-fs (loop0): filesystem is read-only [ 38.998389][ T3855] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 39.021783][ T3855] EXT4-fs (loop0): filesystem is read-only [ 39.027627][ T3855] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.177233][ T3862] loop3: detected capacity change from 0 to 1024 [ 39.184054][ T3862] ext4: Unknown parameter 'nouser_xattr' [ 39.239887][ T3855] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.96: iget: bad i_size value: 648518346341360424 [ 39.278575][ T3855] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.96: couldn't read orphan inode 16 (err -117) [ 39.312743][ T3855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.477955][ T3869] loop1: detected capacity change from 0 to 1024 [ 40.491699][ T3869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.516315][ T3869] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.99'. [ 40.537332][ T3874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 40.779363][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.322694][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 41.322706][ T29] audit: type=1326 audit(1756607705.870:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f43aebe9 code=0x7ffc0000 [ 41.353219][ T29] audit: type=1326 audit(1756607705.900:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f43aebe9 code=0x7ffc0000 [ 41.377512][ T29] audit: type=1326 audit(1756607705.900:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78f43aebe9 code=0x7ffc0000 [ 41.380969][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.400840][ T29] audit: type=1326 audit(1756607705.900:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f43aebe9 code=0x7ffc0000 [ 41.433483][ T29] audit: type=1326 audit(1756607705.930:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78f43b0b07 code=0x7ffc0000 [ 41.456773][ T29] audit: type=1326 audit(1756607705.930:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f78f43b0a7c code=0x7ffc0000 [ 41.461022][ T3879] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.480064][ T29] audit: type=1326 audit(1756607705.930:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f78f43b09b4 code=0x7ffc0000 [ 41.510214][ T29] audit: type=1326 audit(1756607705.930:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f78f43b09b4 code=0x7ffc0000 [ 41.533545][ T29] audit: type=1326 audit(1756607705.930:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f78f43ad84a code=0x7ffc0000 [ 41.556719][ T29] audit: type=1326 audit(1756607705.930:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3878 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78f43aebe9 code=0x7ffc0000 [ 41.557007][ T3879] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.602285][ T3882] loop0: detected capacity change from 0 to 512 [ 41.609934][ T3882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.621619][ T3882] EXT4-fs (loop0): 1 truncate cleaned up [ 41.627756][ T3882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.789053][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 41.797988][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.808932][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.829931][ T3882] ================================================================== [ 41.838033][ T3882] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 41.846898][ T3882] [ 41.849220][ T3882] read-write to 0xffff88810945a140 of 8 bytes by task 3886 on cpu 0: [ 41.857278][ T3882] __filemap_add_folio+0x5b9/0x7d0 [ 41.862406][ T3882] filemap_add_folio+0x98/0x1b0 [ 41.867289][ T3882] __filemap_get_folio+0x31e/0x6b0 [ 41.872412][ T3882] ext4_write_begin+0x2fe/0xeb0 [ 41.877260][ T3882] generic_perform_write+0x184/0x490 [ 41.882560][ T3882] ext4_buffered_write_iter+0x1ee/0x3c0 [ 41.888159][ T3882] ext4_file_write_iter+0xdbf/0xf00 [ 41.893372][ T3882] iter_file_splice_write+0x663/0xa60 [ 41.895285][ T3891] lo speed is unknown, defaulting to 1000 [ 41.898751][ T3882] direct_splice_actor+0x153/0x2a0 [ 41.909564][ T3882] splice_direct_to_actor+0x30f/0x680 [ 41.914924][ T3882] do_splice_direct+0xda/0x150 [ 41.919691][ T3882] do_sendfile+0x380/0x650 [ 41.924112][ T3882] __x64_sys_sendfile64+0x105/0x150 [ 41.929327][ T3882] x64_sys_call+0x2bb0/0x2ff0 [ 41.933501][ T3891] lo speed is unknown, defaulting to 1000 [ 41.933996][ T3882] do_syscall_64+0xd2/0x200 [ 41.944182][ T3882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.950091][ T3882] [ 41.952413][ T3882] read to 0xffff88810945a140 of 8 bytes by task 3882 on cpu 1: [ 41.959964][ T3882] filemap_write_and_wait_range+0x59/0x340 [ 41.965805][ T3882] ext4_file_write_iter+0xe04/0xf00 [ 41.971037][ T3882] iter_file_splice_write+0x663/0xa60 [ 41.976423][ T3882] direct_splice_actor+0x153/0x2a0 [ 41.981540][ T3882] splice_direct_to_actor+0x30f/0x680 [ 41.986934][ T3882] do_splice_direct+0xda/0x150 [ 41.991692][ T3882] do_sendfile+0x380/0x650 [ 41.996168][ T3882] __x64_sys_sendfile64+0x105/0x150 [ 42.001421][ T3882] x64_sys_call+0x2bb0/0x2ff0 [ 42.006136][ T3882] do_syscall_64+0xd2/0x200 [ 42.010678][ T3882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.016589][ T3882] [ 42.018933][ T3882] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 42.026059][ T3882] [ 42.028409][ T3882] Reported by Kernel Concurrency Sanitizer on: [ 42.034581][ T3882] CPU: 1 UID: 0 PID: 3882 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.044207][ T3882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.054259][ T3882] ================================================================== [ 42.074830][ T3892] loop1: detected capacity change from 0 to 1024 [ 42.091786][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.175938][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.294657][ T3882] ================================================================== [ 42.302758][ T3882] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 42.309878][ T3882] [ 42.312195][ T3882] write to 0xffff88810945a0f4 of 4 bytes by task 3886 on cpu 1: [ 42.319853][ T3882] xas_set_mark+0x12b/0x140 [ 42.324445][ T3882] __folio_start_writeback+0x1dd/0x440 [ 42.329909][ T3882] ext4_bio_write_folio+0x5ad/0x9f0 [ 42.335105][ T3882] mpage_process_page_bufs+0x4a1/0x620 [ 42.340569][ T3882] mpage_prepare_extent_to_map+0x786/0xc00 [ 42.346375][ T3882] ext4_do_writepages+0xa05/0x2750 [ 42.351491][ T3882] ext4_writepages+0x176/0x300 [ 42.356247][ T3882] do_writepages+0x1c3/0x310 [ 42.360842][ T3882] filemap_write_and_wait_range+0x144/0x340 [ 42.366749][ T3882] filemap_invalidate_pages+0xa4/0x1a0 [ 42.372205][ T3882] kiocb_invalidate_pages+0x6e/0x80 [ 42.377404][ T3882] __iomap_dio_rw+0x5d4/0x1250 [ 42.382167][ T3882] iomap_dio_rw+0x40/0x90 [ 42.386499][ T3882] ext4_file_write_iter+0xad9/0xf00 [ 42.391693][ T3882] iter_file_splice_write+0x663/0xa60 [ 42.397092][ T3882] direct_splice_actor+0x153/0x2a0 [ 42.402207][ T3882] splice_direct_to_actor+0x30f/0x680 [ 42.407668][ T3882] do_splice_direct+0xda/0x150 [ 42.412429][ T3882] do_sendfile+0x380/0x650 [ 42.416856][ T3882] __x64_sys_sendfile64+0x105/0x150 [ 42.422059][ T3882] x64_sys_call+0x2bb0/0x2ff0 [ 42.426821][ T3882] do_syscall_64+0xd2/0x200 [ 42.431321][ T3882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.437206][ T3882] [ 42.439523][ T3882] read to 0xffff88810945a0f4 of 4 bytes by task 3882 on cpu 0: [ 42.447049][ T3882] xas_find_marked+0x5dc/0x620 [ 42.451812][ T3882] find_get_entry+0x5d/0x380 [ 42.456399][ T3882] filemap_get_folios_tag+0x92/0x210 [ 42.461666][ T3882] mpage_prepare_extent_to_map+0x320/0xc00 [ 42.467452][ T3882] ext4_do_writepages+0xa05/0x2750 [ 42.472561][ T3882] ext4_writepages+0x176/0x300 [ 42.477306][ T3882] do_writepages+0x1c3/0x310 [ 42.481880][ T3882] file_write_and_wait_range+0x156/0x2c0 [ 42.487503][ T3882] generic_buffers_fsync_noflush+0x45/0x120 [ 42.493378][ T3882] ext4_sync_file+0x1ab/0x690 [ 42.498045][ T3882] vfs_fsync_range+0x10d/0x130 [ 42.502791][ T3882] ext4_buffered_write_iter+0x34f/0x3c0 [ 42.508327][ T3882] ext4_file_write_iter+0xdbf/0xf00 [ 42.513516][ T3882] iter_file_splice_write+0x663/0xa60 [ 42.518867][ T3882] direct_splice_actor+0x153/0x2a0 [ 42.523977][ T3882] splice_direct_to_actor+0x30f/0x680 [ 42.529330][ T3882] do_splice_direct+0xda/0x150 [ 42.534077][ T3882] do_sendfile+0x380/0x650 [ 42.538481][ T3882] __x64_sys_sendfile64+0x105/0x150 [ 42.543663][ T3882] x64_sys_call+0x2bb0/0x2ff0 [ 42.548326][ T3882] do_syscall_64+0xd2/0x200 [ 42.552819][ T3882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.558696][ T3882] [ 42.561000][ T3882] value changed: 0x0a000021 -> 0x04000021 [ 42.566693][ T3882] [ 42.568998][ T3882] Reported by Kernel Concurrency Sanitizer on: [ 42.575131][ T3882] CPU: 0 UID: 0 PID: 3882 Comm: syz.0.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.584742][ T3882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.594778][ T3882] ================================================================== [ 42.627325][ T3882] syz.0.103 (3882) used greatest stack depth: 9024 bytes left [ 42.640651][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.