last executing test programs: 34.01255247s ago: executing program 4 (id=1119): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x6, 0x200, &(0x7f0000000880)="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"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003b000000", 0x10) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="28a0911530b800000003000000fbdbff2508404f000400000008004a0082d7e4bd616cf8ef8bdbc400"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000801) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x101, 0x6}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r6, 0x0, 0x20}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0xf) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$nl_netfilter(r8, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) close(r8) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 33.298672084s ago: executing program 4 (id=1130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="df25040000000c000100252d30313064200008000c0000000000080008007f00000108ff0f007f0000010800021b0700"/58], 0x40}, 0x1, 0x0, 0x0, 0x40011}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00010abd7000fcdbdf250700000008000500e0000002050001000100000014000300fc00"/50], 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x8001) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x120040a, &(0x7f0000000240), 0x2, 0x24d, &(0x7f0000000440)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7ffa, 0x101, 0x8}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000006c0)='kmem_cache_free\x00', r5}, 0xfffffffffffffe45) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r6, 0x4, 0x7c00) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) dup3(r7, r6, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020003000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 33.107988086s ago: executing program 4 (id=1133): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, r5, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000001400)={&(0x7f0000006000)={[{&(0x7f0000000340)="8b31380d654d22f886f8d925c6fa016c33be5ada561ed84412fcf130e627b9f62e7c24c7cb3dd75dd712149294cc22750859c9cd589949fa69c66a4b4920818cd07135dbb948098f9329dc40fb983361", 0x50, 0x3}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000001240)="06edbd4696022a0a51ba860debf965d60dc3d36bea58ac84be423e2171661898424b81752599a350c21487226d728ff2fcac5c0639c2b65cb499ba70ee137bbe8ca9cefe0da5cfaeba27fe016d580ed55d6270528c4f713414b8e8571c7ae8dcf7622650cb8926f67e6df29c73d972566a0050ec5832fb4361b1c0673efc552ac03cb604843c0da7a0a860b1a3ea837ad33f54d1391b42e2409fc5044cfda1c9b903cac0158898bf29281f88fcc5913d06e328821afc2c881978f286a638", 0xbe, 0x3}, {&(0x7f0000000200)="179e35a20f1186e35a1bc71a4727985e148ee990ee22", 0x16}, {&(0x7f0000001300)="9365360b81a2e3028fa711ff23cbb8ab4c32e4aead7007416165dfdef71083fa7008722f6adc55e3895e07a8f27e121d19d8d9b535d2af7bfb1290ba9fc28606c8502e129ce566b93a9165b01803e16e9ee0fb284426210edbd1f8d424a4b292a6345fe71f42", 0x66, 0x3}, {&(0x7f0000001380)="35642c1f8a20b35a60898a9d96dd828bdddc2b639c707c4dabc1f872c2a40e3566115b1a6de10bda90a12798d543be2418a78fd6dae8211856836dfbd99a035e6444423f8b0f79aca371e44f8e9c9e9dc20fa98846c6cf05b7e76b", 0x5b, 0x400}, {&(0x7f0000003380)="58fd879b4fcc77f9ef99bc14adda8828fa08c4e057a201d5e2503f70c47dc4a5363598fe100ea48f81f27b00237490229458f9dfca8d411068035695c86b0478009001906bdac49f7c2739e3ea43349fbf8faa673ab0729dfee9f13f4c566efbd6011a46e84bf64830baf584467b5cbcfb7b3c53c308fdae4c665d4086d2e1f4e3565506271c4b42105cc6fdbe9852e41792f1ee7504b7f6803deb5aa5262f9b537a8840388e6fe242502585612e772dcc74e34a1a9cc5c9ff4d917b34b3c8ce20e69115126723bc887fcea95fddb73697dbe94e32f858df8896a2519974cbe6549012cb88552a5d65b19a4e616cdb1df6fe34c0c2b156861a2b247123bd312b07b3f59187004bcf18e6b6c2d102455752b03083dfb07d37602e96123f6e163e2c7f44d187f74b6287863ac3eb98bd18777050dbe151ae6993cef01ccadc785ae2aae1919ff3b6609965c9e8d2ce4e2dfb1b8d2d188452b625235f3a9744d059c84f8d2ad851c811d2a1f802c530b089c3f14942de475f8432c0a81741541dd0dfc163f71e686f91148371dfe269d4709cf45678d1e0c79774f40a736dc5dab349f771e9fff9ff28fff26c5636fb09b8fa5b237abf4aac88ba1b055a5710a972405d2f820da1a28d1a2e602e619b6c025f8697aa19f4d6c19d83a712d081ec93088fb00ef3e58afe14e77dc2937881af6c6abe507fe38a8f89853cbb01bbcd65a7939412434d8f32b17dc895ed7068f2247a75999fbc675d2b325397cdab93e77feb86734103c825c736097e3357c49aac2759dfd5e65b8fa4c611493c983b2ffdc6feed797f14bd131b14b6eccf9360c54c3b636f7c6f293de9e0602eda35a72b82b6dcf98f7d4150e2380d141f6cca618d30e5cdda26ab611212bc8089d6e7be5bf0595182d6e177aec1cc8bd177b229d8a12d855f78d7946a183a4be6e1d4019e85c152967f44beaed7f5b6a1659943f45fab9a7196fe11f031b9aca4f6e0ba15a10cc6b593dd43b0a04cd5b3cda4ee7cb1f38b0b4feff3776ee60042905059b58dbec66436e61e648065ab22650426f97e2613abdc0a3bff4123e8c314d529f4abf6dfeec5cddfae0b9de978e999da8addafae08178e8043f9fd48b53f89d9b68f8801c279efddf9dcb27585e22ac3693ab96b9ae351bb6a87a2f3ff3e192abff2e1340043c1403f1473b618b5312d3186c19fcf052ee9388d37731dfb9b13bbddc263bb4c870ff3abb262743188575b05958d77c7de70e6f4777c2b5d994aa55fb8dc183cae319cd6fd543da24d570f37d1abffec69b067cb8ca9042c595c0a6a40213cc0123c5d53eb089a14ddf08ecb9d46a54ca5681ee86e3a86fa2de9d11e38fc6283699f09f2f7ea5d2eb9d103587f532639c69eecc7e1a1f384ac655174cf5bfb9c63726557504fd4b32d45af2d5e9f8efbaada29d8ee2b85d5affb97e37d1f12d3dbfda855781ef27b0f314d6e6a418b7780e8e50963ad93eb29f7090dea50509531bce0715a98b5b89f0f7060a87cd8841673840cac336118eab974772d9ef599f738382c1b1a74aeaa84e90f72c5be90cd477cfa162e837e5dc5c143c90f2e01b7abb1cd7ba8dc101f1588547d7fca1977b9628a785df55cb073decf4799569c8e14796528cf41c50ac0a384349e38a7e17443e61295906c9f1355fcb051bfbcff85c41eb75b3d64f2a6986ddabd9065fdfb1dbe81c53e41405fa66bc52cc4e79c87a12cfc8ea6515cbb19b6ec12230de47bb2c67281c144ed15c15da9022a07b07460b853b318a5ad85067ffa2fd4d230ce8b9fa23731a9b5cbca7180f51ed3ba58b21e8e8f901f19a45b437deeb610e4cb2f62021d15d33624d3593520d569bb308931df177b38d9a5a8fc99f59f3f89a92bc6719d290612549c2f260cb2bea37bf4e9b7ce99653ee4379a8ad87b00d5f67a5b15df2f4ad89e30e0ef618a8b6f7c521ae48e181d58e8a270f1d226bd82faa5ae1631e766e9d5a5115640f8baf6709515fffd401f1f19ad973ae17ca758f89c1b58270d5bf0c9b384b935e2fae82089b69c2b4bc299d19a179b7f57eea53812fc91d457d877ad845ad196091775f1a7cf21f5f7c6999c653cf93df3a257837b18a828ec409b021ad193044ed13e8051af1bb0230e9bfc4c9308a8ee93b8183fec6257df7202b7ef47a036f0e60f8e2177a83c4b0e99439668b72541c33cd9402158158abd08eac39340df721fafeebd264c5f4bcfa43a7c53ad5b5a9b07a7f76bd2d29b289d2b1a7858949103b2ef007b164651564bc281fbceb5085d99cc53e2153ca44960d6c7b5ba9cac56fd7d4bf27a075b3e7c250d9a217bd90a745585b5c8787a411462f58cc142685879626b0047cbea87765a354d8d2ec50f2e7b7c414960162bd99390db36307a74e09024b836cdd5b7dfd9d9264978c5af41641b9fe520a9a8875b156426ca810e9956068ea46ee576ee000202da9caf80d1d77c202d1652a739776bacd64fd982b7d1e8a3e8eaedf6013e874f70ccac2f4681676445ac1cc322f1f9fde4c865ee197c36f7479fbbd1189a25ca04309ceee22c4ca33ce67d8c6e40af5c957c0dde4add063dafff67e67922a0afa564ed569a62b430a70da338e466982655d7630a10675f4a1eeb7848ada4aa14a72c67c2d13d8ea3b248f00622163301f0ed89c3b64ceae172a55cbdedbc1944a370ac91212ce04d0f8fda91634f7e42bbf7e4943bfe8665cc43b054e7bc5f8f826182f101a429dd9d70d2fcdb138a5c5a40ed688a22653310e2c6550f112e1ab4b1304f6a5aec3a976517ad550fbac887d404352c937f002efd3d02902acc06364c8703093f051cbf8cd4ce4c93115843d256a6f167ed7c1e6d3671c1e70ea58e53f7317a54ec40cbf545ddbfb4c3408452c69450cf38038f906eb694bd08947c3bb60b262c79c8cb9e77327e9df5f6600e4811df8afc6d9934ac1628d47da899891f6561c6f6ae659b3f02e893f433b3f4362bd7ec11d0e0cb1c3f3531f9a1cf446b1b235053c1a1fe5d7a009dec4b4b98137751f3b436dffe57894ab97eeb2732b0c59df76d43f7fd6364a7b04f5924168f5c7fdf532cad5b5e7fcbe0a22b9d1592eb3b326a5937676b4e800134b723136435e002204024eec71dbe5d0e5912639e8634dd057a70b42b272bd7c6e8b760072dcdb64d6642f2a494d362aadc4461df798ab1494778a93f526486b68d499ea40066743f4ce8a9134b2981e19f8708e285216da836dd3499100551c244d509c7d7c29f0c230da0ad24b799db0cb84a0207f96b6f1d243938f612a9212f5efe4a50622cba1e37b115663380a0cf930f8e19e95baa2984ebdbe68d938153f7730bd636496ade99539240416fe265ff5f247cad3e50577cfd8e3f312e2ede693433849759479b615dd076142567f17be786f5a39d96f11d5d8bc6caf91513683410fba2a3341d425ee3dc87475ff5bd116c2abe3410fb3a519443e66306f8030020a3529b7d8944afb019f22a16dce38bd636726fa5d28914f5e934f25eff469b2654d21fbf7820cc7119e3441b6a5963f1295aad045df51c8407e351a565d328f51a771116158b29fd260fc41538eecc90a6a59052ddbdbaa6ef5eb3de3be074716ca786a1b919a389a821346c76f606593132aed9a489254e0234716162e1bc7f2e9b786b9d1b623bc920deb0587be502538f674979aa0b7f61f945d9e3a1e9b67f80d6d7c897bb5d9ccd9c390fa6efa5852a238a35d4de3052f504b067b8c5f4744ce542e0e8ebb423fc3ac3ab19203f59b011221339d8904e13091cc7ffc4f8667fa00b2f25c974b39a47a1ae9c879a71c298529ab98261cc707c7b13e9f33d4416d004f1c65790c975df05d53c6e1c43f3a65d1f87a12ab0b6df766174f602272927a685d1e09e3fa2b3dd8632f760c34c4063b775833118c9329e4080e9c07109aedab1b8549c4fe7867d427a6613304de16a4e7df6777d28447b394c530171a8c6d176cc84d8644c6d0cf19e7efba64aad01126d45cab47fe71c23d7fd3426e880141b962db92165de4da5c4c0350ae0e4bfe4465ab4a04fd76cfaf620e669c8ceb33223be57a8e3dae460eb846ed7ed290db5fd30cb62ee90e10f196dc76725374697d68103e8ebd01168b2bacdeddfbb03671920e1c6cd1e6921a96470a1866b2f59c44f3ec3cfb3d8afd78edde2c22ac98f1b01b002471c9b9921a85dd0bb2d77ebed4bc3a23c53e17a730d70eb83672781ef5596c1f7a4be6e096ff3b49d3a41be7c57173ed51ed0f249fbeca6c5c018c3e25ca76838b8c745bb42f30367815ea5165960b96028275b51ed137ea519a915024c9782b3ed7e81439a0966ccca6aaefe2d0f6aa83f205fc4238a73e04e995a8ac16e0c56ab6d528cc5d3cec60a2621dfde5eadf99b527687c8278ed4ecdd0a381a349d730b4421ceb9daad1bf7fa4a0d4381c46465105bc687c68cfa1aac70edc9adb55cc216c5d55df0165e8ee2265886d8ed975b06d716729ffa16fedbd0bd2484375a4d33f22532e969654b581ec955ea02a57e76e507acb70008d0e4d96543b03809a9977a998e0d5eb89af2604a789e7e9e812b4188c62d88f345624bc91e9db8a7ecba99406781bcd0c647106ca37993fbba4fd78e49c9a4c5bf4d7b970ca62b48f2e6d0b642616c46d0f03e8d561041b0da6763cd55b4b59cb91b17287725d035db3c114f8f322a4faa0a706c93160d62b8c3bbef60defc0d29eaf25028ddc6491ea19556c74bb39b87d36a3b280011c034319f4aed891f0e29c19ba510f727e097dbd25f483a303cae9e965ed56a1c23f04ebf87e2ea278e8646784184c1aa08df9e5daec7f86f53cb9178f5c52ef92268b3b543d0033bc45fa04f6b223b58d5b47fded54a99877a2a1a71fd7745ea16a7f3f7b25a3cca4e252f9f797ef539da11786c05ee157fcebc020898bcec9413ed0983fe0865fb87c54ff09016da8c0e809145af502e52bf3add38cdcc078889b8556d540e546178d42d61304e6a47b165dcf93cffeb500ff41811cad5d076df21a1be5e942423960f600b3f3d59575e4b73890c2a2570e213a40963eb1962231756af1ebf7ab591772bf9c603550eb12027cd2ae3147b364ee8664a6867b3e51a10ea91426d1074b34ab5c7e39139ca877aece13df1f0a06ccfd7f406ca575008f32dbf73c7df4ae6c3a1e3f6571e0aa271915a9049b6f2f93544a551ef69e9293e6381383bd9bdec261b3964d284a48fbb407a169ec945ea81802ecacf35f4272a07a6fcd86d735835528c3215b9f55ac9c1b18d0858c248703de3fa42599fea6d3ff3cc7b0f9a7b2defd14571495629b3dfe0ef1fc48a6aeca776690371e71557a7b74e4a44519a0a9b5d510461d6bdab7a9f3d77baadd1f3f6b61b510fc5274ae4a5f3fff420f4ce7e557a0ed91f769c3b4c6bf2ddbe8970ab83ddbcf8d98a8dfc4f3ab319b5455f6e2801a4c14edeb09717a07c4b7cd987989d3f9750c901f8b516f487d93b83c97f73f193afa5cceac72cf3afb3e165f2d80cd724411331eb474296f28da9bc84f74f1ad7ff338d1942bdf29d168a55573034f904bad7cd5d61f1388c56e0dcec866d831738888abe942accecd660905762443a7592b9d52e052e0336acf20786279025f2b0ccd0f9894fe02d151b12ee9427f74f39a9431a50a39bb497df08c0b1c2a4a44a393e481b06ec3cceda2bf322b5ff3e93b209def6afe32be3242aba58c9b2c1d82667f32df150d5c46f6b0c0812a33c1a09c9b55dd5dc08c5dfdc706c74ac552b21", 0x1000, 0x3}, {&(0x7f0000000280)="fc663a420e21c729f99a43b2677aa20d7900c15e6acb786acf3c4c7e8d7254937e2c3b", 0x23, 0x2}]}, 0x8}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 32.551617999s ago: executing program 4 (id=1140): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000000380)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140), 0x81, 0x477, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x3800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r5, @ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f00000001c0)='f2fs_readdir\x00', r6, 0x0, 0x4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x8000f28, 0x0) splice(r10, 0x0, r9, 0x0, 0x7f, 0xe) write(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) 32.124600902s ago: executing program 4 (id=1144): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000340)={0xfffffff9}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x71b0, 0x1800}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x24000280) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c00)={0x1a4, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8001}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x4}, {0x7, 0x4}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xe}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x4}, {0x7, 0xa}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x2, 0x16, 0x1b, 0x24, 0x18, 0x60, 0x2, 0x18, 0x18, 0x30, 0xb, 0x36, 0x9, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x18d3, 0x401, 0xf, 0x8000, 0x1, 0x7, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x6, 0x2, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xddc, 0x4, 0x32, 0x33, 0xfffc, 0x3, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0x8, 0x3, 0x0, 0x8, 0x4, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x400, 0x1, 0x3, 0xfff3, 0x7, 0xd, 0x3]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x5, 0x36, 0xc, 0x9, 0x16, 0x1b, 0x48, 0x24, 0xb, 0x6, 0x24, 0x60, 0x9af6b8590b5387de, 0x1b, 0xb, 0xc, 0x2, 0x6c, 0x1, 0xc, 0x36, 0xc, 0x4, 0x9, 0x36, 0x28, 0xb, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x1000, 0x5, 0x1, 0x200, 0x2, 0x3]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x4, 0x9, 0xc, 0x10, 0xa, 0x2da]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x24, 0x2, 0x3, 0x30, 0x30, 0x9, 0x36, 0x16, 0x24, 0x6, 0x1, 0x4, 0x1b, 0x60, 0xb, 0x34]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x840}, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readlink(0x0, 0x0, 0x0) unshare(0x20060400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xdf6}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x7, 0x0, 0xb, 0xc}, @map_fd={0x18, 0x88241599ed38bbde, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xeff, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb6}]}, &(0x7f0000000040)='syzkaller\x00', 0x6d, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x2, 0xc6f, 0xffff5d3f}, 0x10, 0xffffffffffffffff, r0, 0x5, &(0x7f0000000400)=[r1], &(0x7f0000000440)=[{0x1, 0x2, 0x80000, 0x9}, {0x0, 0x4, 0x8, 0x3}, {0x5, 0x1, 0x5, 0x7}, {0x0, 0x5, 0xb, 0x9}, {0x3, 0x2}], 0x10, 0x800}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r7, r1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 31.817097594s ago: executing program 4 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000000000000000000000a00"/60], 0x3c}}, 0x4008044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='thermal_power_devfreq_get_power\x00'}, 0x18) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000008c0)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x2000000) 31.816635184s ago: executing program 32 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000000000000000000000a00"/60], 0x3c}}, 0x4008044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='thermal_power_devfreq_get_power\x00'}, 0x18) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000008c0)="$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") r10 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r10, r10, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x2000000) 5.132631839s ago: executing program 0 (id=1374): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvfrom(r1, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x900}, 0x38) time(0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r5 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r5, 0x0) accept$packet(r5, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x9001) renameat2(r6, 0x0, r6, 0x0, 0x4) syz_io_uring_setup(0x581, &(0x7f0000000280)={0x0, 0x3996, 0x2000, 0x3, 0x4a, 0x0, r6}, &(0x7f0000000200), &(0x7f0000000340)) r7 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') 4.743118261s ago: executing program 2 (id=1379): getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x4) finit_module(r4, 0x0, 0x0) ustat(0xd, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r8, 0x5437, 0x0) pread64(r5, &(0x7f0000000400)=""/15, 0xf, 0x2) 4.038042155s ago: executing program 0 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x80000000000}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xa, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f00000007c0)={'#! ', '', [{0x20, '\xbc'}, {0x20, '\x00\x00\x00\x00\x00\x00'}], 0xa, "139c789c4b3ceda88c85ac91cc761d7308fad4753965884341214e1ecaff70bf3612faa6171c23fbda5a3bed93fb7cffe4d2838b27bb9bd0328240f8f04251c3d49972f8178d28ffaa2a0d3fb40ff03ccebc63269964e65f02a62924dd20ae0363222f83c339f7421066d5e34ce7ba29a967293d0e9cbb1428d0f61cb18fb255ce3965a2ded0e48eaf0748c3d055f23fe0667ca32538526b973f2e6a022c98b32e706992e77b9e4262c6d529df"}, 0xba) mmap(&(0x7f0000900000/0x3000)=nil, 0x3000, 0xa, 0x10, r11, 0x0) syz_open_procfs(r9, &(0x7f0000000300)='sessionid\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) r12 = memfd_create(&(0x7f0000000080), 0x1) splice(r7, 0x0, r12, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r6, &(0x7f0000000100)=ANY=[], 0xfffffe3e) sendmmsg$inet(r4, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004) socket$kcm(0x10, 0x2, 0x0) 4.022176756s ago: executing program 2 (id=1384): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) rmdir(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYRESHEX=r4, @ANYBLOB="4bbd754c5d3b3836bb1c770bb801735ad8a11931f1384256d45deb2fad7b681db3d1523d9d04b514cafe6728c44d2277ab9af24622df0a4ca0e3fb154b9c22b4c0ea016cc4557eee28163709f6b0710880e26f96f36da47e60e5ef7d87c72f8d643f7869ac27d5cf00cc2365999988209f39d2d996584c2ad9824a6ca21f19c9d1b60663888e1bfce4128c6fa874d9b92c7415d60f94f2bca1c5bda962456b8dd1ab71a133e1cefa47dfad5f193fc3bd63574b395640061b6af2b6003f48cf01218c15ad5587ea9174ae82d4e400e824d010", @ANYRES64=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r5}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000080)={r2}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r9, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) r10 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x200000000000000, 0x0) 3.853925966s ago: executing program 5 (id=1386): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x6, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x10461}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44004) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8, 0x80, 0x4, 0x9, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "d7677bc1115e"}]}, @ssrr={0x89, 0x1f, 0xbe, [@broadcast, @private=0xa010102, @remote, @multicast1, @empty, @empty, @remote]}]}}}}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1cc, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x15}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x00-\\,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$+{\':))*)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x22, 0x2, '/proc/sys/fs/binfmt_misc/syz3\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\'[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':{!]!\xbf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'blkio.throttle.io_serviced\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@/#-!{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'blkio.throttle.io_serviced\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffff000}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x40}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x400008d}, 0x24001807) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) kexec_load(0x200000, 0x0, &(0x7f00000002c0), 0x3e0000) 3.852868666s ago: executing program 1 (id=1387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40), 0x3b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff00000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000400)={'wg1\x00', @random="ec41c5e4c760"}) openat$incfs(r10, &(0x7f0000000240)='.pending_reads\x00', 0x680000, 0x22) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x0, 0x280, 0x8, 0x4d2005e, r8}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003a00)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc42}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xc32, 0xc8, 0x4, 0x9}, {0x3, 0x0, 0x21, 0x2}, {0x1, 0xfb, 0x1, 0x8}, {0x1, 0xff, 0x6, 0x8}]}, 0x10) 3.162490221s ago: executing program 0 (id=1389): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000040)={0x4, 0xffff, 0x1e, 0x4, 0xf, "db7fa24f5b524e2da29cae9b4215fdf3f1613b"}) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x160, 0x98, 0x98, 0x220, 0x160, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xffffffff, 0xffffff00, 'ip6gretap0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xc7, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x5, @rand_addr=0x64010101, 0x4e23}}}, {{@ip={@loopback, @local, 0xff000000, 0xff000000, 'macsec0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x62, 0x0, 0x38}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x8}}}, {{@ip={@broadcast, @local, 0xff000000, 0xff000000, 'vxcan1\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r8}, 0x18) r9 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.16197317s ago: executing program 1 (id=1390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000300)={r4, 0x78, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x14ce3, 0x100004, 0x0, 0x2, 0x6, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r7}, 0x18) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) read(r8, &(0x7f00000004c0)=""/208, 0xd0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) socket$kcm(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r10 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close(r10) 3.16148577s ago: executing program 5 (id=1391): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14080, &(0x7f0000000180)={[{@errors_remount}, {@noload}, {@noauto_da_alloc}]}, 0x1, 0x56d, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000280)=[0x7f, 0x1]) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.stat\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)) r11 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r11, &(0x7f0000001fc0)=""/184, 0xb8) 3.16008849s ago: executing program 2 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x6) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70b52d, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000007ffffc, 0xfffffffffffffffc}, {0x0, 0xa00, 0x4, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}}, 0xb8}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sendto$inet6(r12, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 2.119730497s ago: executing program 3 (id=1394): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x2980e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x18000, 0xa88, 0x8409, 0x5, 0x4, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x4058534c, &(0x7f0000000000)={0x80, 0x0, {0xc8, 0x2, 0xb, 0x0, 0xfffffffd}, 0xfffffffe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x4, 0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r9, 0x40187013, 0x0) gettid() 2.064526077s ago: executing program 0 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SEND={0x1a, 0x28, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c80)="c7a159d14a2261e39485427e59630709f0ffc17bdb47a2cfae120dbdc1a78658df99c4b0911c0bae6e2a96fb8b55883b963ebdfc2bd6b1cbaefaec8d7a05315c12d5bde9bda1afefbd9549bd02e2a62730b98c60cb536b84d4ce0dc9a19bad2c3863c7a713695fc13be8e39bf83d5d116c34bd90781ee276c1440d491307fbef975775463a4f236b07b5ed3af88e34b3ea7e8b5cfcb9fe4c38968ecb2235d2cbe145b18d187a86664bc4a9df88ed", 0xae, 0x404c000}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="33bd8272dddae0be8dfeff8d1ef071a3aae6b9873c14575fe6a06f91609bdbb13f1e6d19b910d8d8602415562ccffcc88c328e0183be1a20c8169f6751894f1e5a8f3c72bd1a724e27080f260c697c1f2b76dfdde17d14b2266f9245db62c5fc5da309d60bf4c40bd57e7c9633bfa1d10d12da49878c44b02fa88bdadf33abe776c948642318a9abdc4da7ccd9b48521c30b2df65ac94556beb54eb3ae7e46893b3c3912bb6f1a", @ANYRES16=r3, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ptrace(0x10, 0x0) ptrace$setregs(0xd, r1, 0x7, &(0x7f0000000440)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400293c062c7e602000000258381f3553f9bb694d08183b67a925e3891d9fa5d5bba6e1a41", @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000440)='./file0\x00', 0xea) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r9}) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(r1, &(0x7f0000000500)='net/netfilter\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") write$P9_RLERRORu(r5, &(0x7f0000000080)=ANY=[], 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r5, @ANYRESOCT], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) 2.064227857s ago: executing program 1 (id=1396): getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x4) finit_module(r4, 0x0, 0x0) ustat(0xd, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r8, 0x5437, 0x0) pread64(r5, &(0x7f0000000400)=""/15, 0xf, 0x2) 2.063967917s ago: executing program 2 (id=1397): getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ustat(0xd, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) 1.847863778s ago: executing program 3 (id=1398): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010100000000000000000000000000000000000000000000000039259990a9536c328470dec6e7839bd2469f29882b4128d835250d217ddfba151c602af787dfbf03afc685677c77a68fb3aebac6fb94b183a856f8f74fa5b01f59bd7eafa54e63"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000e22a2b9691b1259010000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) r3 = fsmount(r2, 0x0, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300005c89249261b65124000805000100070000000900020073797a3100000000100007800c"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) ioprio_set$pid(0x3, 0x0, 0x4007) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) read(r6, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0xfc, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x4, 0x5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff", 0x30}], 0x1}, 0x48000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimensat(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r9, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x149) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(r9, &(0x7f0000000000)='./file0\x00', 0x5) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 1.68703363s ago: executing program 3 (id=1399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r5, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x4, 0x0, &(0x7f0000000240)) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.59696541s ago: executing program 1 (id=1400): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1f, 0xa, 0x101) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3, 0x3, 0x1, 0x1ff}]}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f14010025bd7000fcdb9f25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x1281b47ab9e6998b}, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, &(0x7f0000002900)="9e", 0x1, 0x2056, 0x1ff, 0x0, 0x3ff, 0x6, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2a, &(0x7f0000000100)=r10, 0x4) recvmsg$unix(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}, 0x2404c140) recvmsg(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/64, 0x40}], 0x1}, 0x40000000) writev(r9, &(0x7f0000000880)=[{&(0x7f0000000640)="b759", 0x2}], 0x1) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6012000800503a00fe80000000000000000000000000001efe8000000000000000000000000000aa08029078000000006000000000001101fe880000000000000000000000000101fc0200000000000000000000000000008000000000000000053a000100000000fb36ee4bc2ad50b375a22a584d16ca55"], 0x0) 1.59642306s ago: executing program 3 (id=1401): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) set_robust_list(0x0, 0x0) inotify_init() r2 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) chmod(&(0x7f0000000180)='./file0\x00', 0x257) syz_emit_ethernet(0xfc2, &(0x7f0000002900)=ANY=[], 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000780)) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000440)=""/219, 0xdb}], 0x5}}, {{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000840)=""/89, 0x59}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000a80)=""/149, 0x95}], 0x7, &(0x7f0000000580)=""/15, 0xf}, 0x9}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/35, 0x23}], 0x1, &(0x7f0000003d80)=""/4096, 0x1000}, 0x8}], 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "3df2d116e4d6bd15", "0f2faa4bd33aa8c00f77dacc9716f49f", "42efa598", "4d0b32c1e009b623"}, 0x28) write(r6, 0x0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 1.335600772s ago: executing program 5 (id=1402): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x401, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002b66d000000000007000000850000006b0000009500000100000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x1, 0x1, 0x80, 0x0, 0x7, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x1}, 0x1000, 0x4, 0x1, 0x5, 0x38, 0x1, 0x9, 0x0, 0x6040, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file1\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='mm_vmscan_throttled\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xdc}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x5, 0x2, 0x3, 0xfffffffffffffffe, 0x10}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x80, &(0x7f00000006c0)=""/128, 0x41100, 0x34, '\x00', r1, 0x25, r7, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x3, 0xb, 0xb674}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x5, 0x5, 0x5, 0x8}], 0x10, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.298431872s ago: executing program 3 (id=1403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$inet(r4, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)="a2", 0x1}], 0x1, &(0x7f0000004680)=ANY=[], 0x128}}], 0x1, 0x40080dd) recvmsg$can_j1939(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/171, 0xab}], 0x1}, 0x8100) r6 = fsopen(&(0x7f00000002c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x86) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x62040300) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.205694822s ago: executing program 2 (id=1404): removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='rxrpc_call_reset\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff840000002d00000095ef"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000000) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x2}, 0x94) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x840041, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) unshare(0x400) 1.122790733s ago: executing program 0 (id=1405): mount$bpf(0x0, &(0x7f0000004280)='./bus\x00', 0x0, 0x20, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x9, @void}, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x29, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x8d14, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x26000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 1.091998703s ago: executing program 5 (id=1406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9af7}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000040)) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x1}, {0x9}, 0x0, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)="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", 0xfd, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="02000000cb010000000000000cc8000000bbaec0c40742c20713f3108265c817d43a1488e589dc5a94d3d6bc00a54049a4e81fdb720ad1d647e0f3f7eecd659ebd6c6ec737da766f87d400d6f24855ae150bc0eba14f240d022c863ecefa3ca1dd3a938311e330e20a3dbf533f25dd3c5f101e7e5db9a2b678afc66cd973336bd2a1c7b4fe24555d94fe5a9ea38603fbcc62da18bb0a9b1c2b8a798917d3fa8e416fcd38f6e29e2f5bdfafe6869ad685aebd310200000000000000e44f6cc25cd6f87cef05409cabcdff9dc3780098eeae35ed697cf7e811b1f600000019e8d96583c0ca5171f2bf21a0f237749c34258ccb8648bc7edb967b79e6221f0a5d720cd9e8b200be9845005ecc58d09efbcb87a219d45255e6578a584f0c8fbe110e10f02b088135963cb6a28a40e360a3fff48af0c892f1aa310000000000000000e70a17df20fcd984b365affff06e712e79364c18adc0f32ac4f7389943867022fd39099c06ef9a00afb35fca3bbada428e0300000003226ef1fb742a41965cd39a2ee57906135c0d950bc1c941f131072abb5b49676f691b6297c5ac77ec9b67d265a7ebbf1ee0960ee11f3b84d8526871fb047a4e090a35da611cd4ac1059d6a80cb07e287c69616de04d4584a68ee0a02981380000002d2e752c003c96084ce10b46f1ab16563f2c9ba11084315fc14885ffce5d670ad940937f11cbc3327694bd7631db2c4150d14063d03b8b40bf4107ea2965ed96dfb76c9913de145365231389c5ffa734c60b88af9e62c5a86f8dcef43f0cd32296c6f4b85dcaf7dcc3b6c652dabe20a25a6cf408c4dc8cffc885ce4be7423b9c1c3f170455781d2de4dde9b4c130be96a6e727ca119e4adf8aea6cc5826a34f025e87067d7616e05a3100ea57952d28f094f3697fe60ed3a17e49fdb28eb353713071ccefc86360c17e68f14b15e19"], 0x20f}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2bfffdffd}, 0xc) close(r10) getxattr(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x46, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 896.536905ms ago: executing program 5 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0xfe, 0x0, 0x0) r2 = semget$private(0x0, 0x7, 0x4b8) semtimedop(r2, 0x0, 0x0, 0x0) semtimedop(r2, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {0x0, 0x5, 0x1800}, {}], 0x3, 0x0) semctl$GETNCNT(r2, 0x0, 0xe, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x7fffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000940)='GPL\x00', 0x64e, 0x10, &(0x7f0000000980)=""/16, 0x40f00, 0x49, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0x0, 0x7f, 0x84c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x10, 0xff}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) r8 = accept(r3, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPSET_CMD_TEST(r9, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x44, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'nr0\x00'}}]}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x8004) bind(r8, &(0x7f00000007c0)=@un=@file={0x1, './file0\x00'}, 0x80) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, 0x0, 0x2000c800) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000180)="b5ba1f5bdcc90093080db19b8969695b842cc18ad4d3a42ac4c04af21931eed725ed0cd585e7013d6192f1d51089a324d9707aae6164abb59a38dab124c824ca197493c4912be038a029cd0a653a8e9cfd3b99a7211f04504ef02e5c649fc26afae4747aed1930c383153462d46d1b11e0a7a5127ebc") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 442.230677ms ago: executing program 3 (id=1408): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, 0x0, &(0x7f00000003c0)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x60}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0410050000000900000000f994"], 0x48) 438.108117ms ago: executing program 0 (id=1418): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x6, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x10461}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44004) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvtap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8, 0x80, 0x4, 0x9, {{0x11, 0x4, 0x2, 0x3, 0x44, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "d7677bc1115e"}]}, @ssrr={0x89, 0x1f, 0xbe, [@broadcast, @private=0xa010102, @remote, @multicast1, @empty, @empty, @remote]}]}}}}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1cc, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x15}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x164, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x00-\\,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '$+{\':))*)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x22, 0x2, '/proc/sys/fs/binfmt_misc/syz3\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+\'[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':{!]!\xbf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'blkio.throttle.io_serviced\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@/#-!{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x1f, 0x2, 'blkio.throttle.io_serviced\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffff000}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x40}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x400008d}, 0x24001807) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) kexec_load(0x200000, 0x0, &(0x7f00000002c0), 0x3e0000) 437.867197ms ago: executing program 1 (id=1409): getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x4) finit_module(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r8, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) pread64(r5, &(0x7f0000000400)=""/15, 0xf, 0x2) 437.566127ms ago: executing program 2 (id=1410): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='rpcgss_context\x00', r3, 0x0, 0x4}, 0x18) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080)={[{@nobh}, {@bsdgroups}, {@data_err_ignore}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0x8001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0x1}, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) unshare(0x62040200) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 28.763679ms ago: executing program 5 (id=1411): getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = memfd_create(0x0, 0x4) finit_module(r4, 0x0, 0x0) ustat(0xd, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r8, 0x5437, 0x0) pread64(r5, &(0x7f0000000400)=""/15, 0xf, 0x2) 0s ago: executing program 1 (id=1412): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408c9, 0xe) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") openat(r0, &(0x7f0000000080)='./file1\x00', 0x202020, 0x144) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x84}}, 0x44cc0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020", @ANYRESHEX=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote, r7}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x98, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa6d}}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x10}}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xdd}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xec}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x98}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) dup2(r5, r6) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): EA inode 32 err=-116 [ 152.586517][T11233] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.917: error while reading EA inode 32 err=-116 [ 152.620224][T11218] lo speed is unknown, defaulting to 1000 [ 152.626633][T11233] EXT4-fs (loop0): 1 orphan inode deleted [ 152.642509][T11233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.651533][T11218] lo speed is unknown, defaulting to 1000 [ 152.743906][T11244] lo speed is unknown, defaulting to 1000 [ 152.907561][T11276] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 152.962991][T11280] vlan2: entered promiscuous mode [ 152.968187][T11280] vlan2: entered allmulticast mode [ 152.973307][T11280] hsr_slave_1: entered allmulticast mode [ 152.981033][T11280] netlink: 48 bytes leftover after parsing attributes in process `syz.4.923'. [ 152.991923][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 153.023841][T11244] lo speed is unknown, defaulting to 1000 [ 153.032420][T11244] lo speed is unknown, defaulting to 1000 [ 153.032814][T11284] lo speed is unknown, defaulting to 1000 [ 153.112076][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.134733][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.188515][T11284] lo speed is unknown, defaulting to 1000 [ 153.222417][T11284] lo speed is unknown, defaulting to 1000 [ 153.261880][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.750409][T11381] lo speed is unknown, defaulting to 1000 [ 153.928331][T11381] lo speed is unknown, defaulting to 1000 [ 153.934771][T11381] lo speed is unknown, defaulting to 1000 [ 154.068763][T11395] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 154.192490][T11432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.286706][T11434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.297456][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 154.467037][T11441] netlink: 92 bytes leftover after parsing attributes in process `syz.1.934'. [ 154.495707][T11441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.612468][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 154.856004][T11456] loop2: detected capacity change from 0 to 512 [ 154.863265][T11454] lo speed is unknown, defaulting to 1000 [ 154.872281][T11456] /dev/loop2: Can't open blockdev [ 154.976639][T11454] lo speed is unknown, defaulting to 1000 [ 154.982972][T11454] lo speed is unknown, defaulting to 1000 [ 155.158437][T11484] 9pnet_fd: Insufficient options for proto=fd [ 155.323031][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 155.332691][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'. [ 155.341854][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 155.366560][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.938'. [ 155.564568][T11500] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 155.660256][T11504] lo speed is unknown, defaulting to 1000 [ 155.771269][T11504] lo speed is unknown, defaulting to 1000 [ 155.780871][T11504] lo speed is unknown, defaulting to 1000 [ 156.108110][ T29] kauditd_printk_skb: 871 callbacks suppressed [ 156.108158][ T29] audit: type=1400 audit(177.823:15573): avc: denied { create } for pid=11494 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 156.133962][ T29] audit: type=1400 audit(177.823:15574): avc: denied { sys_admin } for pid=11494 comm="syz.3.941" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 156.154718][ T29] audit: type=1400 audit(178.127:15575): avc: denied { module_request } for pid=11494 comm="syz.3.941" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 156.239121][T11531] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 156.299282][T11536] Cannot find add_set index 2 as target [ 156.504599][ T29] audit: type=1400 audit(178.516:15576): avc: denied { create } for pid=11502 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.524177][ T29] audit: type=1400 audit(178.558:15577): avc: denied { create } for pid=11499 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.544235][ T29] audit: type=1400 audit(178.558:15578): avc: denied { write } for pid=11499 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.564054][ T29] audit: type=1400 audit(178.558:15579): avc: denied { nlmsg_write } for pid=11499 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.584861][ T29] audit: type=1400 audit(178.589:15580): avc: denied { read } for pid=11502 comm="syz.2.943" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 156.611652][ T29] audit: type=1400 audit(178.589:15581): avc: denied { watch } for pid=11502 comm="syz.2.943" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 156.640149][ T29] audit: type=1326 audit(178.589:15582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11491 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 156.679981][T11500] dummy0: entered promiscuous mode [ 156.709382][T11500] dummy0: entered allmulticast mode [ 156.715188][T11500] team0: Port device dummy0 added [ 156.781337][T11547] loop2: detected capacity change from 0 to 512 [ 156.795827][T11531] dummy0: left promiscuous mode [ 156.800953][T11531] dummy0: left allmulticast mode [ 156.857259][T11547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.945: error while reading EA inode 32 err=-116 [ 156.873825][T11531] team0: Port device dummy0 removed [ 156.883500][T11531] .`: (slave dummy0): Enslaving as an active interface with an up link [ 156.904265][T11547] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.945: error while reading EA inode 32 err=-116 [ 156.927304][T11547] EXT4-fs (loop2): 1 orphan inode deleted [ 156.933779][T11547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.304430][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.321534][T11561] program syz.3.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.388993][T11572] __nla_validate_parse: 1 callbacks suppressed [ 157.389012][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 157.436060][T11572] batman_adv: batadv0: Removing interface: veth1_vlan [ 157.469034][T11575] ipvlan0: entered promiscuous mode [ 157.577408][T11605] Cannot find del_set index 3 as target [ 157.622563][T11615] loop2: detected capacity change from 0 to 128 [ 157.733440][T11621] syz.2.954: attempt to access beyond end of device [ 157.733440][T11621] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 157.759165][T11624] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 157.818397][T11621] syz.2.954: attempt to access beyond end of device [ 157.818397][T11621] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 157.840414][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 157.849964][T11621] syz.2.954: attempt to access beyond end of device [ 157.849964][T11621] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 157.864729][T11621] syz.2.954: attempt to access beyond end of device [ 157.864729][T11621] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 157.878672][T11621] syz.2.954: attempt to access beyond end of device [ 157.878672][T11621] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 157.893002][T11631] netlink: 796 bytes leftover after parsing attributes in process `syz.2.954'. [ 157.910835][T11631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.954'. [ 157.924722][T11621] syz.2.954: attempt to access beyond end of device [ 157.924722][T11621] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 157.947033][T11621] syz.2.954: attempt to access beyond end of device [ 157.947033][T11621] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 157.961155][T11621] syz.2.954: attempt to access beyond end of device [ 157.961155][T11621] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 157.984209][T11621] syz.2.954: attempt to access beyond end of device [ 157.984209][T11621] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 158.001518][T11636] loop3: detected capacity change from 0 to 512 [ 158.014794][T11640] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.951'. [ 158.025014][T11621] syz.2.954: attempt to access beyond end of device [ 158.025014][T11621] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 158.042535][T11636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.959: error while reading EA inode 32 err=-116 [ 158.056584][T11640] netlink: zone id is out of range [ 158.061730][T11640] netlink: zone id is out of range [ 158.067532][T11640] netlink: zone id is out of range [ 158.072848][T11640] netlink: zone id is out of range [ 158.077991][T11640] netlink: zone id is out of range [ 158.079206][T11636] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.959: error while reading EA inode 32 err=-116 [ 158.083316][T11640] netlink: zone id is out of range [ 158.100521][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 158.108867][T11640] netlink: set zone limit has 8 unknown bytes [ 158.138909][T11636] EXT4-fs (loop3): 1 orphan inode deleted [ 158.152581][T11636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.293865][T11659] SELinux: Context @ is not valid (left unmapped). [ 158.353023][T11668] block device autoloading is deprecated and will be removed. [ 158.485019][T11672] lo speed is unknown, defaulting to 1000 [ 158.518951][T11676] ipvlan0: entered promiscuous mode [ 158.572967][T11668] lo speed is unknown, defaulting to 1000 [ 158.658729][T11672] lo speed is unknown, defaulting to 1000 [ 158.665506][T11672] lo speed is unknown, defaulting to 1000 [ 158.742440][T11668] lo speed is unknown, defaulting to 1000 [ 158.791203][T11668] lo speed is unknown, defaulting to 1000 [ 158.842237][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.127624][T11715] lo speed is unknown, defaulting to 1000 [ 159.175228][T11744] team0: Caught tx_queue_len zero misconfig [ 159.280720][T11759] loop0: detected capacity change from 0 to 128 [ 159.387748][T11715] lo speed is unknown, defaulting to 1000 [ 159.401969][T11715] lo speed is unknown, defaulting to 1000 [ 159.429964][T11759] bond0: option lp_interval: invalid value (0) [ 159.436364][T11759] bond0: option lp_interval: allowed values 1 - 2147483647 [ 159.449410][T11759] bond0 (unregistering): Released all slaves [ 159.470867][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 159.479879][T11803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'. [ 159.496147][T11803] netlink: 96 bytes leftover after parsing attributes in process `syz.1.976'. [ 159.503963][T11765] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 159.599868][T11860] x_tables: duplicate underflow at hook 3 [ 159.898635][T11871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.979'. [ 159.915427][T11871] loop0: detected capacity change from 0 to 512 [ 159.922685][T11871] EXT4-fs: Ignoring removed orlov option [ 160.035397][T11871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.052462][T11871] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.060686][T11871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.979: bg 0: block 248: padding at end of block bitmap is not set [ 160.075490][T11871] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.979: Failed to acquire dquot type 1 [ 160.088890][T11871] EXT4-fs (loop0): 1 truncate cleaned up [ 160.100770][T11871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.460005][T11881] loop3: detected capacity change from 0 to 128 [ 160.489365][T11881] vfat: Unknown parameter 'ÿ' [ 160.559568][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.705737][T11897] loop0: detected capacity change from 0 to 512 [ 160.731962][T11897] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.981: error while reading EA inode 32 err=-116 [ 160.748774][T11901] Cannot find del_set index 3 as target [ 160.759693][ T7010] hid-generic 0000:86010001:0006.0006: unknown main item tag 0x0 [ 160.781717][ T7010] hid-generic 0000:86010001:0006.0006: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 160.815513][T11897] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.981: error while reading EA inode 32 err=-116 [ 160.867772][T11897] EXT4-fs (loop0): 1 orphan inode deleted [ 160.875457][ T29] kauditd_printk_skb: 1228 callbacks suppressed [ 160.875476][ T29] audit: type=1326 audit(183.324:16809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf31786567 code=0x7ffc0000 [ 160.896631][T11897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.918838][ T29] audit: type=1400 audit(183.355:16810): avc: denied { write } for pid=11887 comm="syz.2.982" name="hidraw0" dev="devtmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 160.941875][ T29] audit: type=1326 audit(183.355:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf3172b779 code=0x7ffc0000 [ 160.965034][ T29] audit: type=1326 audit(183.355:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf31786567 code=0x7ffc0000 [ 160.988335][ T29] audit: type=1326 audit(183.355:16813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf3172b779 code=0x7ffc0000 [ 161.011868][ T29] audit: type=1326 audit(183.355:16814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 161.042627][ T29] audit: type=1326 audit(183.366:16815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf31786567 code=0x7ffc0000 [ 161.066590][ T29] audit: type=1326 audit(183.366:16816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf3172b779 code=0x7ffc0000 [ 161.089914][ T29] audit: type=1326 audit(183.366:16817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 161.113315][ T29] audit: type=1326 audit(183.366:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf31786567 code=0x7ffc0000 [ 161.261419][T11914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.285247][T11915] pim6reg: entered allmulticast mode [ 161.306378][T11915] pim6reg: left allmulticast mode [ 161.395292][T11921] loop3: detected capacity change from 0 to 128 [ 161.458174][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.490378][T11934] loop2: detected capacity change from 0 to 512 [ 161.522249][T11934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.556674][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.715382][T11952] tipc: Started in network mode [ 161.720875][T11952] tipc: Node identity 5ef238e19a8c, cluster identity 4711 [ 161.728350][T11952] tipc: Enabled bearer , priority 0 [ 161.738336][T11952] syzkaller0: MTU too low for tipc bearer [ 161.744241][T11952] tipc: Disabling bearer [ 162.320724][T11961] lo speed is unknown, defaulting to 1000 [ 162.426821][T11961] lo speed is unknown, defaulting to 1000 [ 162.433289][T11961] lo speed is unknown, defaulting to 1000 [ 163.084218][T11993] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 163.147408][T11993] __nla_validate_parse: 2 callbacks suppressed [ 163.147428][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 163.163304][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.989'. [ 163.184088][T11998] loop0: detected capacity change from 0 to 512 [ 163.193052][T12001] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 163.247887][T11998] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.990: corrupted in-inode xattr: e_name out of bounds [ 163.263251][T11993] netlink: 96 bytes leftover after parsing attributes in process `syz.2.989'. [ 163.273398][T11998] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.990: couldn't read orphan inode 15 (err -117) [ 163.318075][T11998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.419327][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.453122][T12011] lo speed is unknown, defaulting to 1000 [ 163.511315][T12023] loop0: detected capacity change from 0 to 512 [ 163.607260][T12009] netlink: 536 bytes leftover after parsing attributes in process `syz.1.1002'. [ 163.641307][T12011] lo speed is unknown, defaulting to 1000 [ 163.648188][T12011] lo speed is unknown, defaulting to 1000 [ 163.698685][T12009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1002'. [ 163.727396][T12023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.877670][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.916786][T12041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.002031][T12065] 9pnet: Could not find request transport: fd HID v69662f.2e Device [syz1] on syz0 [ 169.252582][T12404] loop3: detected capacity change from 0 to 1024 [ 169.270573][T12404] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 169.343016][T12404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.449934][T12416] loop0: detected capacity change from 0 to 512 [ 169.461154][T12416] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.470102][T12397] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm +}[@: missing EA_INODE flag [ 169.508494][T12416] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1046: bad orphan inode 13 [ 169.534646][T12397] EXT4-fs (loop3): Remounting filesystem read-only [ 169.542011][T12416] ext4_test_bit(bit=12, block=18) = 1 [ 169.547457][T12416] is_bad_inode(inode)=0 [ 169.551792][T12416] NEXT_ORPHAN(inode)=2130706432 [ 169.556765][T12416] max_ino=32 [ 169.560068][T12416] i_nlink=1 [ 169.580700][T12416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.621745][T12416] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 169.632749][T12428] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 169.644331][T12416] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1046: bg 0: block 248: padding at end of block bitmap is not set [ 169.675775][T12416] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1046: Failed to acquire dquot type 1 [ 169.715330][T12433] lo speed is unknown, defaulting to 1000 [ 169.728248][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'. [ 169.738539][T12431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'. [ 169.748760][T12416] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 169.846628][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.848276][T12433] lo speed is unknown, defaulting to 1000 [ 169.861755][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 169.872234][T12433] lo speed is unknown, defaulting to 1000 [ 169.979753][T12453] x_tables: duplicate underflow at hook 2 [ 170.045656][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.113294][T12476] loop2: detected capacity change from 0 to 1024 [ 170.151130][T12476] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 170.162651][T12476] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 170.192623][T12476] JBD2: no valid journal superblock found [ 170.198436][T12476] EXT4-fs (loop2): Could not load journal inode [ 170.317377][T12453] lo speed is unknown, defaulting to 1000 [ 170.440025][T12453] lo speed is unknown, defaulting to 1000 [ 170.446346][T12453] lo speed is unknown, defaulting to 1000 [ 170.532589][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 170.532617][ T29] audit: type=1326 audit(177.469:18272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12496 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 170.606070][ T29] audit: type=1326 audit(177.500:18273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12496 comm="syz.0.1056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 170.692923][ T29] audit: type=1326 audit(177.532:18274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b83af6c9 code=0x7ffc0000 [ 170.715585][ T29] audit: type=1326 audit(177.532:18275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b83af6c9 code=0x7ffc0000 [ 170.738437][ T29] audit: type=1326 audit(177.574:18276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12480 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 170.762061][ T29] audit: type=1326 audit(177.574:18277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12480 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 170.798538][T12526] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1057'. [ 170.923780][ T29] audit: type=1326 audit(177.763:18278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 170.946906][ T29] audit: type=1326 audit(177.763:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 170.970795][ T29] audit: type=1326 audit(177.763:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 170.994153][ T29] audit: type=1326 audit(177.763:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12528 comm="syz.3.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 171.137746][T12540] lo speed is unknown, defaulting to 1000 [ 171.187104][T12548] macvtap0: entered promiscuous mode [ 171.198459][T12548] macvtap0: left promiscuous mode [ 171.250726][T12552] loop0: detected capacity change from 0 to 732 [ 171.257517][T12552] iso9660: Unknown parameter '18446744073709551615' [ 171.380931][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'. [ 171.404224][T12540] lo speed is unknown, defaulting to 1000 [ 171.412466][T12540] lo speed is unknown, defaulting to 1000 [ 171.621564][T12599] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1066'. [ 171.840779][T12588] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 171.883753][T12608] lo speed is unknown, defaulting to 1000 [ 171.913677][T12613] netlink: 'syz.2.1069': attribute type 13 has an invalid length. [ 171.990720][T12615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1069'. [ 172.020915][T12613] bridge0: port 1(gretap0) entered disabled state [ 172.058035][T12616] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.883977][T12621] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 173.026189][T12608] lo speed is unknown, defaulting to 1000 [ 173.036728][T12608] lo speed is unknown, defaulting to 1000 [ 173.834914][T12663] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1075'. [ 173.844624][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 173.952669][T12665] loop3: detected capacity change from 0 to 1024 [ 174.021456][T12665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.236007][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.540917][T12696] pim6reg: entered allmulticast mode [ 174.650536][T12708] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1078'. [ 174.759198][T12712] loop3: detected capacity change from 0 to 512 [ 174.770062][T12696] pim6reg: left allmulticast mode [ 174.806235][T12712] ext4: Unknown parameter 'smackfsroot' [ 175.016612][T12701] bridge0: port 1(gretap0) entered blocking state [ 175.023401][T12701] bridge0: port 1(gretap0) entered forwarding state [ 175.066996][T12701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.077571][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.091282][T12701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.240416][T12738] ip6t_srh: unknown srh match flags 4000 [ 175.338457][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 175.338476][ T29] audit: type=1326 audit(182.508:18645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.368892][ T29] audit: type=1326 audit(182.508:18646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.456066][ T29] audit: type=1326 audit(182.560:18647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.479589][ T29] audit: type=1326 audit(182.560:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.503315][ T29] audit: type=1326 audit(182.560:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.526657][ T29] audit: type=1326 audit(182.571:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.550442][ T29] audit: type=1326 audit(182.571:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.561293][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 175.574441][ T29] audit: type=1326 audit(182.571:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.574480][ T29] audit: type=1326 audit(182.571:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.574534][ T29] audit: type=1326 audit(182.571:18654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 175.633396][T12742] loop2: detected capacity change from 0 to 764 [ 175.655053][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1090'. [ 175.867182][T12759] loop0: detected capacity change from 0 to 512 [ 176.019662][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 176.040805][T12759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.066375][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 176.155739][T12775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1093'. [ 176.363015][T12782] rock: directory entry would overflow storage [ 176.369366][T12782] rock: sig=0x4f50, size=4, remaining=3 [ 176.375291][T12782] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 176.813647][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.818551][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 176.832831][T12787] netlink: 'syz.3.1096': attribute type 5 has an invalid length. [ 176.840779][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1096'. [ 176.869684][T12802] 9pnet_fd: p9_fd_create_unix (12802): problem connecting socket: ./file0: -2 [ 176.892544][T12799] loop2: detected capacity change from 0 to 128 [ 176.950660][T12802] netlink: 'syz.0.1097': attribute type 4 has an invalid length. [ 177.004288][T12802] bridge0: entered promiscuous mode [ 177.021104][T12802] netlink: 'syz.0.1097': attribute type 4 has an invalid length. [ 177.031399][T12809] bio_check_eod: 136 callbacks suppressed [ 177.031420][T12809] syz.2.1098: attempt to access beyond end of device [ 177.031420][T12809] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 177.051374][T12809] syz.2.1098: attempt to access beyond end of device [ 177.051374][T12809] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 177.056655][T12810] SELinux: security_context_str_to_sid (§Ëi½ÿ›úmlîÖ´;Àº%i…Ü­JÿI·—„i‰Îb4ÓO¾¹ öjKdt¼`´‰Í–éT)ÍŒv¼äãK—S‡A¿öZß8òÊ,×cnÄJ•›ßØ0§<ÿÿÜêe*#®ù`árþZêßö $¢sF’©{÷U™’FGŸ\¿õXW%½ž|äQàìþÒÓn¸ácˆ]¹PåŽA5 n [ 177.056655][T12810] ¥ÕÎõ¡WúÙ-z“yÁ®˜"¤Ygˆ]1ë! [ 177.056655][T12810] »xüÏ$ÌHŸ6tBbÒ€Ýa¼¯zM‰OH( YݽPêŸFiD×W˜£þ[ÚóN6.@Je½ç¢ þ»î@¾ ^Æ ¦) failed with errno=-22 [ 177.130567][T12809] syz.2.1098: attempt to access beyond end of device [ 177.130567][T12809] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 177.154751][T12809] syz.2.1098: attempt to access beyond end of device [ 177.154751][T12809] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 177.207553][T12809] syz.2.1098: attempt to access beyond end of device [ 177.207553][T12809] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 177.230283][T12819] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 177.239780][T12809] syz.2.1098: attempt to access beyond end of device [ 177.239780][T12809] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 177.261536][T12809] syz.2.1098: attempt to access beyond end of device [ 177.261536][T12809] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 177.313895][T12809] syz.2.1098: attempt to access beyond end of device [ 177.313895][T12809] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 177.327663][T12809] syz.2.1098: attempt to access beyond end of device [ 177.327663][T12809] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 177.342482][T12809] syz.2.1098: attempt to access beyond end of device [ 177.342482][T12809] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 177.418144][T12828] lo speed is unknown, defaulting to 1000 [ 177.523402][T12828] lo speed is unknown, defaulting to 1000 [ 177.530005][T12828] lo speed is unknown, defaulting to 1000 [ 177.620064][T12867] x_tables: duplicate underflow at hook 2 [ 177.695180][T12870] netlink: 'syz.3.1111': attribute type 21 has an invalid length. [ 177.751519][T12837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.792735][T12844] lo speed is unknown, defaulting to 1000 [ 177.794892][T12877] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 177.887392][T12883] hub 6-0:1.0: USB hub found [ 177.892153][T12883] hub 6-0:1.0: 8 ports detected [ 177.984807][T12844] lo speed is unknown, defaulting to 1000 [ 177.997457][T12844] lo speed is unknown, defaulting to 1000 [ 178.182240][T12908] rdma_rxe: rxe_newlink: failed to add lo [ 178.232275][T12912] syzkaller1: entered promiscuous mode [ 178.237925][T12912] syzkaller1: entered allmulticast mode [ 178.610964][T12966] __nla_validate_parse: 12 callbacks suppressed [ 178.610982][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 178.671192][T12953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.762056][T12980] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 178.769832][T12980] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1129'. [ 178.852886][T12982] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 178.921065][T12989] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 178.984772][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1130'. [ 179.102772][T12994] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 179.246549][T13010] x_tables: duplicate underflow at hook 2 [ 179.303643][T13010] loop3: detected capacity change from 0 to 1024 [ 179.312000][T13010] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.323760][T13010] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.334394][T13010] JBD2: no valid journal superblock found [ 179.340142][T13010] EXT4-fs (loop3): Could not load journal inode [ 179.364799][T13010] lo speed is unknown, defaulting to 1000 [ 179.416335][T13010] lo speed is unknown, defaulting to 1000 [ 179.422392][T13010] lo speed is unknown, defaulting to 1000 [ 179.530249][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 179.608248][T13049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.714032][T13054] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 179.821153][T13060] sd 0:0:1:0: device reset [ 179.847143][T13060] program syz.3.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.857557][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.867242][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.881359][T13049] loop2: detected capacity change from 0 to 1024 [ 179.897450][T13049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.930098][T13049] can: request_module (can-proto-0) failed. [ 180.020532][T13075] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1145'. [ 180.031505][T13075] netlink: zone id is out of range [ 180.036723][T13075] netlink: zone id is out of range [ 180.051106][T13075] netlink: set zone limit has 8 unknown bytes [ 180.163088][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 180.163104][ T29] audit: type=1400 audit(187.578:19467): avc: denied { create } for pid=13082 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.222063][ T29] audit: type=1326 audit(187.631:19468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 180.259090][ T29] audit: type=1326 audit(187.652:19469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 180.282859][ T29] audit: type=1400 audit(187.652:19470): avc: denied { create } for pid=13082 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.303383][ T29] audit: type=1400 audit(187.652:19471): avc: denied { write } for pid=13082 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.324030][ T29] audit: type=1400 audit(187.662:19472): avc: denied { read } for pid=13082 comm="syz.3.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 180.344770][ T29] audit: type=1326 audit(187.662:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 180.368133][ T29] audit: type=1326 audit(187.662:19474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 180.392062][ T29] audit: type=1326 audit(187.662:19475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 180.415148][ T29] audit: type=1326 audit(187.662:19476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13078 comm="syz.0.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 180.442516][T13091] lo speed is unknown, defaulting to 1000 [ 180.459478][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1151'. [ 180.479440][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.548451][T13091] lo speed is unknown, defaulting to 1000 [ 180.551416][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 180.564901][T13091] lo speed is unknown, defaulting to 1000 [ 180.600026][T13123] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 180.610082][T13118] loop3: detected capacity change from 0 to 128 [ 180.683440][T13163] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.697612][T13163] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 180.746265][T13123] gretap1: entered promiscuous mode [ 180.782603][T13123] bond2: (slave gretap1): making interface the new active one [ 180.824141][T13123] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 180.840013][T13163] macvlan0: entered promiscuous mode [ 180.845370][T13163] macvlan0: entered allmulticast mode [ 180.859756][T13163] bond2: entered promiscuous mode [ 180.865486][T13163] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 180.879132][T13163] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 180.906850][T13163] bond2: left promiscuous mode [ 181.115150][T13213] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 181.129504][T13213] loop2: detected capacity change from 0 to 128 [ 181.136734][T13213] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.152550][T13213] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.174059][ T3338] bond0 (unregistering): Released all slaves [ 181.270328][ T3338] IPVS: stopping backup sync thread 10328 ... [ 181.495190][T13091] chnl_net:caif_netlink_parms(): no params data found [ 181.571401][ T293] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.622359][ T3338] hsr_slave_0: left promiscuous mode [ 181.716799][T13357] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 181.733504][ T293] smc: removing ib device !yz! [ 181.753187][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 181.925556][ T7010] lo speed is unknown, defaulting to 1000 [ 181.925789][T13366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13366 comm=syz.2.1159 [ 181.931413][ T7010] infiniband syz0: ib_query_port failed (-19) [ 181.950793][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 181.968781][T13378] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 181.983577][T13352] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 182.005992][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.039155][T13371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.048871][T13371] bond0: (slave batadv0): making interface the new active one [ 182.058072][T13371] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 182.075936][T13417] loop3: detected capacity change from 0 to 512 [ 182.090917][T13417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.114933][T13417] EXT4-fs (loop3): 1 truncate cleaned up [ 182.122067][T13417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.136323][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 182.155133][T13091] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.162342][T13091] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.170800][T13091] bridge_slave_0: entered allmulticast mode [ 182.177976][T13091] bridge_slave_0: entered promiscuous mode [ 182.195807][T13091] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.203147][T13091] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.211212][T13091] bridge_slave_1: entered allmulticast mode [ 182.217806][T13091] bridge_slave_1: entered promiscuous mode [ 182.240241][T13473] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 182.260732][T13091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.272281][T13091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.333280][T13091] team0: Port device team_slave_0 added [ 182.340174][T13091] team0: Port device team_slave_1 added [ 182.379943][T13091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.387132][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.413340][T13091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.420167][ T3338] IPVS: stop unused estimator thread 0... [ 182.478013][T13091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.485025][T13091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.511231][T13091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.583690][T13091] hsr_slave_0: entered promiscuous mode [ 182.598551][T13091] hsr_slave_1: entered promiscuous mode [ 182.638334][T13586] tmpfs: Unknown parameter 'mÂLave' [ 182.817068][T13091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.829793][T13091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.849976][T13668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.858284][T13668] bond0: (slave bond3): Enslaving as an active interface with an up link [ 182.869352][T13091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.880175][T13668] loop2: detected capacity change from 0 to 512 [ 182.888375][T13091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.903715][T13668] EXT4-fs error (device loop2): __ext4_fill_super:5512: inode #2: comm syz.2.1171: inode has both inline data and extents flags [ 182.954535][T13668] EXT4-fs (loop2): get root inode failed [ 182.960238][T13668] EXT4-fs (loop2): mount failed [ 182.973212][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.006138][T13091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.063677][T13091] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.080249][T13668] gretap0: left allmulticast mode [ 183.085524][T13668] gretap0: left promiscuous mode [ 183.090698][T13668] bridge0: port 1(gretap0) entered disabled state [ 183.137124][T13668] bond1: (slave wireguard0): Releasing backup interface [ 183.152331][T13668] wireguard0: left promiscuous mode [ 183.157817][T13668] bond1: (slave wireguard1): making interface the new active one [ 183.166434][T13668] wireguard1: entered promiscuous mode [ 183.182846][T13668] bond1: (slave wireguard1): Releasing backup interface [ 183.190066][T13668] wireguard1: left promiscuous mode [ 183.197915][T13668] bond2: (slave gretap1): Releasing active interface [ 183.210214][T13668] bond0: (slave bond3): Releasing backup interface [ 183.263737][T13718] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 183.285710][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.293026][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.303938][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.311298][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.522913][T13091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.569382][T13779] sock: sock_timestamping_bind_phc: sock not bind to device [ 183.578334][T13752] 0ªX¹¦À: left allmulticast mode [ 183.583349][T13752] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 183.609944][T13776] lo speed is unknown, defaulting to 1000 [ 183.638880][T13784] loop0: detected capacity change from 0 to 512 [ 183.710519][T13784] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 183.794032][T13776] lo speed is unknown, defaulting to 1000 [ 183.841116][T13091] veth0_vlan: entered promiscuous mode [ 183.849217][T13784] lo speed is unknown, defaulting to 1000 [ 183.850971][T13091] veth1_vlan: entered promiscuous mode [ 183.881648][T13091] veth0_macvtap: entered promiscuous mode [ 183.882104][T13822] syz!: rxe_newlink: already configured on team_slave_0 [ 183.892485][T13091] veth1_macvtap: entered promiscuous mode [ 183.954534][T13091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.974094][T13091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.992445][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.002005][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.027910][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.055195][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.124569][T13784] lo speed is unknown, defaulting to 1000 [ 184.285440][T13841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.398347][T13875] x_tables: duplicate underflow at hook 2 [ 184.483630][T13891] loop0: detected capacity change from 0 to 512 [ 184.493777][T13891] ext4: Unknown parameter 'smackfsroot' [ 184.567914][T13875] loop5: detected capacity change from 0 to 1024 [ 184.763636][T13875] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.775475][T13875] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.933829][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 184.933858][ T29] audit: type=1400 audit(192.575:20106): avc: denied { execute } for pid=13890 comm="syz.0.1187" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.960910][ T29] audit: type=1400 audit(192.575:20107): avc: denied { execute_no_trans } for pid=13890 comm="syz.0.1187" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.038536][T13875] JBD2: no valid journal superblock found [ 185.044389][T13875] EXT4-fs (loop5): Could not load journal inode [ 185.145389][ T29] audit: type=1326 audit(192.785:20108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81e226df10 code=0x7ffc0000 [ 185.168880][ T29] audit: type=1326 audit(192.796:20109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81e226f2cb code=0x7ffc0000 [ 185.191803][ T29] audit: type=1326 audit(192.796:20110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f81e226e32a code=0x7ffc0000 [ 185.266576][T13875] lo speed is unknown, defaulting to 1000 [ 185.282477][ T29] audit: type=1326 audit(192.890:20111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e226f6c9 code=0x7ffc0000 [ 185.305261][ T29] audit: type=1326 audit(192.890:20112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e226f6c9 code=0x7ffc0000 [ 185.327886][ T29] audit: type=1326 audit(192.901:20113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13874 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f81e226f6c9 code=0x7ffc0000 [ 185.369451][ T29] audit: type=1400 audit(193.037:20114): avc: denied { validate_trans } for pid=13928 comm="syz.0.1189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.507260][ T29] audit: type=1400 audit(193.174:20115): avc: denied { write } for pid=13928 comm="syz.0.1189" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.533287][T13931] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1189' sets config #0 [ 185.704147][T13937] xt_TCPMSS: Only works on TCP SYN packets [ 185.752561][T13931] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1189' sets config #1 [ 185.795077][T13938] lo speed is unknown, defaulting to 1000 [ 185.944716][T13875] lo speed is unknown, defaulting to 1000 [ 186.463331][T13938] lo speed is unknown, defaulting to 1000 [ 187.097856][T13983] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 187.396365][T14004] loop5: detected capacity change from 0 to 164 [ 187.504550][T14015] __nla_validate_parse: 4 callbacks suppressed [ 187.504566][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 187.540303][T14015] loop0: detected capacity change from 0 to 128 [ 187.696703][T14038] 9pnet_fd: p9_fd_create_unix (14038): problem connecting socket: ./file0: -2 [ 187.726659][T14038] netlink: 'syz.3.1202': attribute type 4 has an invalid length. [ 187.742972][ T1035] lo speed is unknown, defaulting to 1000 [ 187.748947][ T1035] sz1: Port: 1 Link DOWN [ 187.757096][T14038] bridge2: entered promiscuous mode [ 187.762876][T14015] bio_check_eod: 9071 callbacks suppressed [ 187.762891][T14015] syz.0.1197: attempt to access beyond end of device [ 187.762891][T14015] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 187.788513][T14038] netlink: 'syz.3.1202': attribute type 4 has an invalid length. [ 187.796459][ T1035] lo speed is unknown, defaulting to 1000 [ 187.805393][ T1035] lo speed is unknown, defaulting to 1000 [ 187.811390][ T1035] sz1: Port: 1 Link ACTIVE [ 187.825482][T14015] syz.0.1197: attempt to access beyond end of device [ 187.825482][T14015] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 187.834710][T14044] bridge0: port 1(batadv1) entered blocking state [ 187.846011][T14044] bridge0: port 1(batadv1) entered disabled state [ 187.849072][T14015] syz.0.1197: attempt to access beyond end of device [ 187.849072][T14015] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 187.872387][T14049] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1204'. [ 187.880826][T14044] batadv1: entered allmulticast mode [ 187.890157][T14015] syz.0.1197: attempt to access beyond end of device [ 187.890157][T14015] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 187.903974][T14050] loop2: detected capacity change from 0 to 128 [ 187.915477][T14015] syz.0.1197: attempt to access beyond end of device [ 187.915477][T14015] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 187.920697][T14044] batadv1: entered promiscuous mode [ 187.929875][T14015] syz.0.1197: attempt to access beyond end of device [ 187.929875][T14015] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 187.948775][ T7008] lo speed is unknown, defaulting to 1000 [ 187.964231][T14050] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 187.967400][T14015] syz.0.1197: attempt to access beyond end of device [ 187.967400][T14015] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 187.989724][T14015] syz.0.1197: attempt to access beyond end of device [ 187.989724][T14015] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 188.004042][T14015] syz.0.1197: attempt to access beyond end of device [ 188.004042][T14015] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 188.018099][T14015] syz.0.1197: attempt to access beyond end of device [ 188.018099][T14015] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 188.105820][T14068] netlink: 'syz.2.1208': attribute type 1 has an invalid length. [ 188.116232][T14032] xt_connbytes: Forcing CT accounting to be enabled [ 188.123105][T14032] set match dimension is over the limit! [ 188.256698][T14081] loop5: detected capacity change from 0 to 2048 [ 188.305853][ T293] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 188.315392][T14085] loop2: detected capacity change from 0 to 512 [ 188.322007][ T293] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 188.341660][T14081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.379028][T14094] sz1: rxe_newlink: already configured on lo [ 188.385231][T14085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.444859][T14093] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 188.475409][T14093] EXT4-fs (loop5): Remounting filesystem read-only [ 188.485465][ T293] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 188.587714][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.691656][T14085] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.1212: lblock 23 mapped to illegal pblock 18 (length 1) [ 188.732803][T14113] loop5: detected capacity change from 0 to 512 [ 188.742432][T14113] EXT4-fs: Ignoring removed bh option [ 188.748105][T14085] EXT4-fs (loop2): Remounting filesystem read-only [ 188.811996][T14113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.859167][T14104] netlink: 'syz.0.1214': attribute type 5 has an invalid length. [ 188.928446][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.942296][T14125] loop3: detected capacity change from 0 to 1024 [ 189.039342][T14125] EXT4-fs: Ignoring removed orlov option [ 189.081272][T14125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.185379][T14144] lo speed is unknown, defaulting to 1000 [ 189.244222][T14144] lo speed is unknown, defaulting to 1000 [ 189.420107][T14144] lo speed is unknown, defaulting to 1000 [ 189.474803][T14144] lo speed is unknown, defaulting to 1000 [ 189.744673][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 189.744692][ T29] audit: type=1326 audit(197.594:20673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 189.775126][ T29] audit: type=1326 audit(197.594:20674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 189.810000][ T29] audit: type=1326 audit(197.594:20675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 189.834335][ T29] audit: type=1326 audit(197.594:20676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14123 comm="syz.3.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 189.891246][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 189.939364][T14186] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1220'. [ 189.951516][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.071203][T14124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 190.078027][T14124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 190.086470][T14124] vhci_hcd vhci_hcd.0: Device attached [ 190.093834][T14198] vhci_hcd: connection closed [ 190.094123][ T268] vhci_hcd: stop threads [ 190.103105][ T268] vhci_hcd: release socket [ 190.107564][ T268] vhci_hcd: disconnect device [ 190.121875][T14197] vhci_hcd: invalid port number 255 [ 190.127463][T14197] vhci_hcd: invalid port number 255 [ 190.331284][ T29] audit: type=1326 audit(197.772:20677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 190.354725][ T29] audit: type=1326 audit(197.772:20678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 190.378078][ T29] audit: type=1326 audit(197.772:20679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 190.401634][ T29] audit: type=1326 audit(197.772:20680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 190.425138][ T29] audit: type=1326 audit(197.772:20681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 190.448690][ T29] audit: type=1326 audit(197.772:20682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14138 comm="syz.1.1219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 190.715463][T14203] loop5: detected capacity change from 0 to 2048 [ 190.716449][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.811424][T14203] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.1220: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 190.871450][T14203] EXT4-fs (loop5): get root inode failed [ 190.877290][T14203] EXT4-fs (loop5): mount failed [ 190.899002][T14228] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1224'. [ 190.916385][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 190.925740][T14227] team0: left allmulticast mode [ 190.930638][T14227] team0: left promiscuous mode [ 190.935590][T14227] bridge0: port 1(team0) entered disabled state [ 190.942750][T14223] 9pnet: Could not find request transport: f [ 190.959757][T14223] loop3: detected capacity change from 0 to 512 [ 190.989784][T14223] EXT4-fs: Ignoring removed bh option [ 191.016986][T14223] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 191.042620][T14211] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 191.051740][T14223] EXT4-fs (loop3): 1 truncate cleaned up [ 191.065513][T14223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.127882][T14246] loop2: detected capacity change from 0 to 128 [ 191.147003][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.194499][T14246] pim6reg: entered allmulticast mode [ 191.242894][T14246] pim6reg: left allmulticast mode [ 191.347959][T14246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 191.354785][T14246] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.363053][T14246] vhci_hcd vhci_hcd.0: Device attached [ 191.434819][T14270] vhci_hcd: connection closed [ 191.435081][ T268] vhci_hcd: stop threads [ 191.444108][ T268] vhci_hcd: release socket [ 191.448551][ T268] vhci_hcd: disconnect device [ 191.574035][T14249] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 191.617625][T14277] siw: device registration error -23 [ 191.624214][T14277] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1232'. [ 191.678439][T14263] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 191.704161][T14282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.717792][T14282] bond0: (slave bond1): Enslaving as an active interface with a down link [ 191.758093][T14282] loop3: detected capacity change from 0 to 512 [ 191.783424][T14282] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.1233: inode has both inline data and extents flags [ 191.806621][T14282] EXT4-fs (loop3): get root inode failed [ 191.812478][T14282] EXT4-fs (loop3): mount failed [ 191.915380][T14282] bond0: (slave bond1): Releasing active interface [ 192.382087][T14343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.583028][T14369] siw: device registration error -23 [ 192.601690][T14369] loop2: detected capacity change from 0 to 1024 [ 192.617270][T14369] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1244: Failed to acquire dquot type 0 [ 192.639077][T14369] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 192.669128][T14369] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1244: corrupted inode contents [ 192.726321][T14369] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #13: comm syz.2.1244: mark_inode_dirty error [ 192.759297][T14369] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1244: corrupted inode contents [ 192.817089][T14362] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 192.825577][T14369] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1244: mark_inode_dirty error [ 192.870671][T14362] .`: (slave dummy0): Releasing backup interface [ 192.888963][T14369] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1244: corrupted inode contents [ 192.900779][T14362] team0: Port device dummy0 added [ 192.910592][T14369] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 192.921740][T14369] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #13: comm syz.2.1244: corrupted inode contents [ 192.934517][T14369] EXT4-fs error (device loop2): ext4_truncate:4637: inode #13: comm syz.2.1244: mark_inode_dirty error [ 192.948028][T14369] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 192.958113][T14369] EXT4-fs (loop2): 1 truncate cleaned up [ 192.967277][T14369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.985266][T14388] loop3: detected capacity change from 0 to 512 [ 192.999735][T14388] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.000712][T14369] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.029986][T14388] EXT4-fs (loop3): 1 truncate cleaned up [ 193.054415][T14388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.082081][T14383] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 193.126161][T14362] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 193.149830][T14401] bridge0: port 1(ipvlan0) entered blocking state [ 193.156457][T14401] bridge0: port 1(ipvlan0) entered disabled state [ 193.165228][T14401] ipvlan0: entered allmulticast mode [ 193.170552][T14401] bridge0: entered allmulticast mode [ 193.185439][T14401] ipvlan0: left allmulticast mode [ 193.190569][T14401] bridge0: left allmulticast mode [ 193.218415][T14362] team0: Port device dummy0 removed [ 193.227618][T14362] .`: (slave dummy0): Enslaving as an active interface with an up link [ 193.259932][T14432] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 193.271035][T14416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.282630][T14416] bond0: (slave bond1): Enslaving as an active interface with a down link [ 193.303365][T14408] loop0: detected capacity change from 0 to 512 [ 193.312893][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.340684][T14408] EXT4-fs error (device loop0): __ext4_fill_super:5512: inode #2: comm syz.0.1247: inode has both inline data and extents flags [ 193.356313][T14455] lo speed is unknown, defaulting to 1000 [ 193.374037][T14408] EXT4-fs (loop0): get root inode failed [ 193.379737][T14408] EXT4-fs (loop0): mount failed [ 193.393118][T14455] lo speed is unknown, defaulting to 1000 [ 193.487338][ C0] blk_print_req_error: 4 callbacks suppressed [ 193.487359][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 193.514570][T14459] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 193.523116][T14459] netlink: 'syz.3.1250': attribute type 2 has an invalid length. [ 193.536666][T14408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.729050][T14472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.872491][T14516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.891766][T14522] siw: device registration error -23 [ 194.119215][T14528] lo speed is unknown, defaulting to 1000 [ 194.155382][T14528] lo speed is unknown, defaulting to 1000 [ 194.295007][T14516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.321847][T14516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.383558][T14516] loop3: detected capacity change from 0 to 1024 [ 194.439590][T14516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.544755][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 194.544775][ T29] audit: type=1326 audit(202.664:21239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b83a6567 code=0x7ffc0000 [ 194.696774][T14516] can: request_module (can-proto-0) failed. [ 194.752948][ T29] audit: type=1326 audit(202.706:21240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b834b779 code=0x7ffc0000 [ 194.776773][ T29] audit: type=1326 audit(202.706:21241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b83a6567 code=0x7ffc0000 [ 194.799995][ T29] audit: type=1326 audit(202.706:21242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b834b779 code=0x7ffc0000 [ 194.824130][ T29] audit: type=1326 audit(202.706:21243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f05b83af6c9 code=0x7ffc0000 [ 194.847583][ T29] audit: type=1326 audit(202.717:21244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b83a6567 code=0x7ffc0000 [ 194.871235][ T29] audit: type=1326 audit(202.717:21245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b834b779 code=0x7ffc0000 [ 194.894395][ T29] audit: type=1326 audit(202.717:21246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f05b83af6c9 code=0x7ffc0000 [ 194.917416][ T29] audit: type=1326 audit(202.727:21247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05b83a6567 code=0x7ffc0000 [ 194.941482][ T29] audit: type=1326 audit(202.727:21248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.2.1256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05b834b779 code=0x7ffc0000 [ 195.019122][T14561] loop2: detected capacity change from 0 to 512 [ 195.086148][T14561] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1256: error while reading EA inode 32 err=-116 [ 195.147795][T14561] EXT4-fs (loop2): Remounting filesystem read-only [ 195.154521][T14561] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 195.214880][T14561] EXT4-fs (loop2): 1 orphan inode deleted [ 195.251418][T14561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.257634][T14600] syz!: rxe_newlink: already configured on team_slave_0 [ 195.285233][T14561] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.314983][T14605] bridge0: port 1(batadv1) entered blocking state [ 195.321551][T14605] bridge0: port 1(batadv1) entered disabled state [ 195.329137][T14605] batadv1: entered allmulticast mode [ 195.336485][T14605] batadv1: entered promiscuous mode [ 195.380837][T14605] loop0: detected capacity change from 0 to 128 [ 195.390739][T14576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.407786][T14605] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 195.537300][T14636] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 195.549019][T14636] rdma_rxe: rxe_newlink: failed to add bond0 [ 195.640233][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.663890][T14645] loop2: detected capacity change from 0 to 512 [ 195.701200][T14645] EXT4-fs: Ignoring removed oldalloc option [ 195.726654][T14645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.729968][T14649] netlink: 'syz.5.1264': attribute type 10 has an invalid length. [ 195.755964][T14645] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1263: invalid indirect mapped block 4294967295 (level 0) [ 195.758937][T14649] team0: Port device dummy0 added [ 195.783653][T14645] EXT4-fs (loop2): Remounting filesystem read-only [ 195.791142][T14645] EXT4-fs (loop2): 1 orphan inode deleted [ 195.797211][T14645] EXT4-fs (loop2): 1 truncate cleaned up [ 195.805846][ T293] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 195.815298][ T293] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 195.858720][T14645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.870849][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 195.978554][T14658] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 195.997450][T14671] ip6tnl0: Caught tx_queue_len zero misconfig [ 196.003673][T14671] sch_fq: defrate 4294967295 ignored. [ 196.050462][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.061618][T14649] netlink: 'syz.5.1264': attribute type 10 has an invalid length. [ 196.076160][T14668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14668 comm=syz.1.1267 [ 196.092295][T14649] team0: Port device dummy0 removed [ 196.110629][T14649] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 196.124532][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 196.147371][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 196.161774][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 196.179107][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'. [ 196.181097][T14684] lo speed is unknown, defaulting to 1000 [ 196.193280][T14687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 196.276626][T14684] lo speed is unknown, defaulting to 1000 [ 196.733011][T14776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.859612][T14781] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 196.899805][T14766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.950956][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1279'. [ 196.960097][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1279'. [ 196.978333][T14776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.989551][T14776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.004403][T14776] loop5: detected capacity change from 0 to 1024 [ 197.034105][T14776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.058155][T14801] 9pnet_fd: p9_fd_create_unix (14801): problem connecting socket: ./file0: -111 [ 197.073881][T14776] can: request_module (can-proto-0) failed. [ 197.100385][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 197.109333][T14801] netlink: 'syz.1.1281': attribute type 30 has an invalid length. [ 197.150259][ T293] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.162357][ T293] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.179926][ T293] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.197290][ T268] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.687171][T14823] bond1: option mode: unable to set because the bond device is up [ 197.758129][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.775397][T14823] .`: (slave dummy0): Releasing backup interface [ 197.804402][T14823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.909663][T14855] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=14855 comm=syz.3.1287 [ 198.128197][T14835] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 198.151870][T14886] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 198.172419][T14835] team0: Port device dummy0 added [ 198.371148][T14835] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 198.391103][T14835] team0: Port device dummy0 removed [ 198.409921][T14835] .`: (slave dummy0): Enslaving as an active interface with an up link [ 198.567485][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 198.654194][T14949] 9pnet_fd: p9_fd_create_unix (14949): problem connecting socket: ./file0: -2 [ 198.671619][T14949] netlink: 'syz.5.1295': attribute type 4 has an invalid length. [ 198.689752][T14949] bridge1: entered promiscuous mode [ 198.718741][T14949] netlink: 'syz.5.1295': attribute type 4 has an invalid length. [ 198.763949][T14956] loop3: detected capacity change from 0 to 2048 [ 198.785150][T14956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.878193][T14965] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1297: bg 0: block 345: padding at end of block bitmap is not set [ 198.893467][T14965] EXT4-fs (loop3): Remounting filesystem read-only [ 198.901499][ T3441] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 199.242340][T14977] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 199.361760][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.461464][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 199.461483][ T29] audit: type=1326 audit(207.840:21796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.526503][ T29] audit: type=1326 audit(207.871:21797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.550255][ T29] audit: type=1326 audit(207.871:21798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.573472][ T29] audit: type=1326 audit(207.871:21799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.597206][ T29] audit: type=1326 audit(207.871:21800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.620337][ T29] audit: type=1326 audit(207.871:21801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.643962][ T29] audit: type=1400 audit(207.871:21802): avc: denied { append } for pid=15008 comm="syz.0.1305" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.667240][ T29] audit: type=1400 audit(207.871:21803): avc: denied { ioctl } for pid=15008 comm="syz.0.1305" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.697763][T15014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15014 comm=syz.0.1305 [ 199.710870][T14994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.736984][T15010] sch_fq: defrate 4294967295 ignored. [ 199.814276][T15017] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 199.824598][ T29] audit: type=1326 audit(208.207:21804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 199.849306][ T29] audit: type=1326 audit(208.207:21805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15005 comm="syz.3.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2162bdf6c9 code=0x7ffc0000 [ 200.014243][T15044] lo speed is unknown, defaulting to 1000 [ 200.061736][T15044] lo speed is unknown, defaulting to 1000 [ 200.181307][T15024] loop0: detected capacity change from 0 to 764 [ 200.458242][T15085] rock: directory entry would overflow storage [ 200.464520][T15085] rock: sig=0x4f50, size=4, remaining=3 [ 200.470120][T15085] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 200.570217][T15079] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 200.602904][T15090] lo speed is unknown, defaulting to 1000 [ 200.643519][T15090] lo speed is unknown, defaulting to 1000 [ 200.650049][T15094] loop0: detected capacity change from 0 to 512 [ 200.681798][T15094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.723501][T15094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15094 comm=syz.0.1316 [ 200.737296][T15094] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 200.771802][T15094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.798695][T15113] loop5: detected capacity change from 0 to 164 [ 200.803747][T15094] __nla_validate_parse: 9 callbacks suppressed [ 200.803765][T15094] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1316'. [ 200.820402][T15113] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 200.862460][T15113] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 200.880160][T15113] Symlink component flag not implemented [ 200.885877][T15113] Symlink component flag not implemented [ 200.894692][T15142] loop3: detected capacity change from 0 to 2048 [ 200.918496][T15113] Symlink component flag not implemented (7) [ 200.924547][T15113] Symlink component flag not implemented (116) [ 200.996218][T15147] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.026218][T15102] syzkaller0: entered promiscuous mode [ 201.028874][T15147] rock: directory entry would overflow storage [ 201.038427][T15147] rock: sig=0x4f50, size=4, remaining=3 [ 201.044109][T15147] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.054396][T15102] syzkaller0 (unregistering): left promiscuous mode [ 201.102722][T15142] rdma_rxe: rxe_newlink: failed to add bond0 [ 201.116524][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.175005][T15177] loop5: detected capacity change from 0 to 1024 [ 201.218416][T15177] EXT4-fs: Ignoring removed orlov option [ 201.233486][T15188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1323'. [ 201.273582][T15177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.400892][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1324'. [ 201.432245][T15171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.448861][T15188] loop3: detected capacity change from 0 to 764 [ 201.462896][T15188] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 201.539071][T15208] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 201.545728][T15208] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.554106][T15208] vhci_hcd vhci_hcd.0: Device attached [ 201.565682][T15219] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 201.587451][T15203] lo speed is unknown, defaulting to 1000 [ 201.672588][T15188] lo speed is unknown, defaulting to 1000 [ 201.688779][T15214] vhci_hcd: connection closed [ 201.689169][ T3338] vhci_hcd: stop threads [ 201.698627][ T3338] vhci_hcd: release socket [ 201.703291][ T3338] vhci_hcd: disconnect device [ 201.720650][T15203] lo speed is unknown, defaulting to 1000 [ 201.863692][T15238] ip6gretap1: left allmulticast mode [ 201.869315][T15238] vlan2: left allmulticast mode [ 201.874241][T15238] bridge_slave_0: left allmulticast mode [ 201.880619][T15238] veth2: left promiscuous mode [ 201.885742][T15238] veth2: left allmulticast mode [ 201.892062][T15238] bond1: left promiscuous mode [ 201.899028][T15238] gretap1: left promiscuous mode [ 201.904740][T15238] batadv1: left allmulticast mode [ 201.910055][T15238] batadv1: left promiscuous mode [ 201.915171][T15238] bridge0: port 1(batadv1) entered disabled state [ 201.928086][T15188] lo speed is unknown, defaulting to 1000 [ 202.013756][T15238] syzkaller1: entered promiscuous mode [ 202.019277][T15238] syzkaller1: entered allmulticast mode [ 202.202368][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.285958][T15311] loop2: detected capacity change from 0 to 1024 [ 202.299699][T15311] ext4: Unknown parameter 'uid<00000000000000000000' [ 202.362347][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1329'. [ 202.448216][T15317] loop0: detected capacity change from 0 to 1024 [ 202.451989][T15311] loop2: detected capacity change from 0 to 512 [ 202.486866][T15311] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1329: Failed to acquire dquot type 1 [ 202.537867][T15317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.564352][T15311] EXT4-fs (loop2): 1 truncate cleaned up [ 202.579823][T15311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.601134][T15308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.634328][T15311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.668003][ T4045] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.692925][T15319] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 202.796900][T15357] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1333'. [ 202.843290][T15357] siw: device registration error -23 [ 202.886650][T15360] loop5: detected capacity change from 0 to 512 [ 202.938272][T15360] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.1335: EA inode hash validation failed [ 202.977980][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 202.995482][T15360] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.1335: corrupted inode contents [ 203.007876][T15360] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.1335: mark_inode_dirty error [ 203.031038][T15367] loop3: detected capacity change from 0 to 1024 [ 203.051949][T15360] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.1335: corrupted inode contents [ 203.067744][T15367] /dev/loop3: Can't open blockdev [ 203.089750][T15360] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.1335: mark_inode_dirty error [ 203.126026][T15360] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.1335: mark inode dirty (error -117) [ 203.142046][T15363] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 203.169680][T15360] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 203.179855][T15344] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 203.187714][T15344] netlink: 'syz.1.1332': attribute type 2 has an invalid length. [ 203.189432][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 203.196245][T15360] EXT4-fs (loop5): 1 orphan inode deleted [ 203.231535][T15360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.255996][T15391] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 203.264522][T15391] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 203.319282][T15395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.415499][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.515363][T15419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1345'. [ 203.569475][T15416] loop5: detected capacity change from 0 to 128 [ 203.633283][T15416] bio_check_eod: 30 callbacks suppressed [ 203.633302][T15416] syz.5.1344: attempt to access beyond end of device [ 203.633302][T15416] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 203.652770][T15416] buffer_io_error: 6 callbacks suppressed [ 203.652791][T15416] Buffer I/O error on dev loop5, logical block 2078, async page read [ 203.669101][T15416] syz.5.1344: attempt to access beyond end of device [ 203.669101][T15416] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 203.683015][T15416] Buffer I/O error on dev loop5, logical block 2078, async page read [ 203.697117][T15416] syz.5.1344: attempt to access beyond end of device [ 203.697117][T15416] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 203.710898][T15416] Buffer I/O error on dev loop5, logical block 2078, async page read [ 203.888521][T15433] netlink: 'syz.1.1348': attribute type 4 has an invalid length. [ 203.908290][T15451] loop5: detected capacity change from 0 to 128 [ 203.944531][T15451] pim6reg: entered allmulticast mode [ 203.953088][T15451] pim6reg: left allmulticast mode [ 203.965797][T15457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.023128][T15460] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 204.029884][T15460] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 204.034344][T15433] infiniband syz0: set down [ 204.037732][T15460] vhci_hcd vhci_hcd.0: Device attached [ 204.042233][T15433] infiniband syz0: added bond_slave_0 [ 204.070397][T15433] RDS/IB: syz0: added [ 204.070421][T15433] smc: adding ib device syz0 with port count 1 [ 204.070512][T15433] smc: ib device syz0 port 1 has no pnetid [ 204.105715][T15410] loop3: detected capacity change from 0 to 2048 [ 204.193096][T15461] vhci_hcd: connection closed [ 204.193292][T15441] vhci_hcd: stop threads [ 204.202464][T15441] vhci_hcd: release socket [ 204.206932][T15441] vhci_hcd: disconnect device [ 204.237430][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 204.237449][ T29] audit: type=1326 audit(212.847:22509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.247971][T15410] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.1343: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 204.267880][ T7016] vhci_hcd: vhci_device speed not set [ 204.308950][ T29] audit: type=1326 audit(212.910:22510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.332616][ T29] audit: type=1326 audit(212.910:22511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.335109][T15410] EXT4-fs (loop3): get root inode failed [ 204.356208][ T29] audit: type=1326 audit(212.910:22512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.361374][T15410] EXT4-fs (loop3): mount failed [ 204.385300][ T29] audit: type=1326 audit(212.910:22513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.412972][ T29] audit: type=1326 audit(212.910:22514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.436762][ T29] audit: type=1326 audit(212.910:22515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.460097][ T29] audit: type=1326 audit(212.910:22516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.483822][ T29] audit: type=1326 audit(212.910:22517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.507105][ T29] audit: type=1326 audit(212.910:22518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15468 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 204.830998][T15497] 9pnet_fd: p9_fd_create_unix (15497): problem connecting socket: ./file0: -30 [ 204.850543][T15498] bond0: (slave dummy0): Releasing backup interface [ 204.878216][T15497] loop2: detected capacity change from 0 to 512 [ 204.911276][T15498] bridge_slave_0: left allmulticast mode [ 204.916998][T15498] bridge_slave_0: left promiscuous mode [ 204.923419][T15498] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.980519][T15497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.004558][T15498] bridge_slave_1: left allmulticast mode [ 205.010362][T15498] bridge_slave_1: left promiscuous mode [ 205.016807][T15498] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.047709][T15498] bond0: (slave bond_slave_0): Releasing backup interface [ 205.068867][T15498] bond0: (slave bond_slave_1): Releasing backup interface [ 205.105744][T15498] team0: Port device team_slave_0 removed [ 205.122408][T15498] team0: Port device team_slave_1 removed [ 205.133580][T15498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.141050][T15498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.160412][T15498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.167951][T15498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.197020][T15498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 205.225560][T15507] syzkaller1: entered promiscuous mode [ 205.231220][T15507] syzkaller1: entered allmulticast mode [ 205.284742][T15494] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 205.315454][T15518] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 205.342747][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.390727][T15534] loop2: detected capacity change from 0 to 512 [ 205.414755][T15536] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 205.415314][T15534] EXT4-fs: Ignoring removed bh option [ 205.433280][T15536] rdma_rxe: rxe_newlink: failed to add bond0 [ 205.455155][T15534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.646909][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.711062][T15539] wireguard2: entered promiscuous mode [ 205.716609][T15539] wireguard2: entered allmulticast mode [ 205.764050][T15546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=15546 comm=syz.1.1359 [ 205.786847][T15565] __nla_validate_parse: 5 callbacks suppressed [ 205.786861][T15565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1364'. [ 205.843719][T15548] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 205.902179][T15563] loop5: detected capacity change from 0 to 512 [ 205.940076][T15563] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1362: error while reading EA inode 32 err=-116 [ 206.010077][T15563] EXT4-fs (loop5): Remounting filesystem read-only [ 206.013252][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 206.016881][T15563] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 206.016917][T15563] EXT4-fs (loop5): 1 orphan inode deleted [ 206.017697][T15563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.047478][T15580] loop2: detected capacity change from 0 to 1024 [ 206.055746][T15563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.095059][T15586] loop0: detected capacity change from 0 to 128 [ 206.095571][T15580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.116481][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 206.211804][T15586] pim6reg: entered allmulticast mode [ 206.220846][T15580] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.1375: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 206.243910][T15591] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 206.259738][T15586] pim6reg: left allmulticast mode [ 206.271677][T15580] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1375: reserved inode found cleared - inode=2 [ 206.294923][T15580] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.1375: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 206.316652][T15602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 206.319345][T15580] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.1375: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 206.323379][T15602] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 206.349982][T15602] vhci_hcd vhci_hcd.0: Device attached [ 206.390335][T15610] loop3: detected capacity change from 0 to 1024 [ 206.393941][T15580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 206.408869][T15606] vhci_hcd: connection closed [ 206.416824][T15580] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.2.1375: path /295/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 206.417152][T15435] vhci_hcd: stop threads [ 206.428464][T15610] EXT4-fs: Ignoring removed bh option [ 206.443657][T15435] vhci_hcd: release socket [ 206.457319][T15435] vhci_hcd: disconnect device [ 206.479245][T15610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.529232][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 206.543969][T15610] netlink: 660 bytes leftover after parsing attributes in process `syz.3.1369'. [ 206.555095][T15610] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 206.567484][T15621] loop5: detected capacity change from 0 to 128 [ 206.574694][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.588097][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 206.591355][ T7008] vhci_hcd: vhci_device speed not set [ 206.605123][T15621] syz.5.1370: attempt to access beyond end of device [ 206.605123][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.619364][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.633742][T15621] syz.5.1370: attempt to access beyond end of device [ 206.633742][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.647986][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.669857][T15621] syz.5.1370: attempt to access beyond end of device [ 206.669857][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.684172][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.692825][T15621] syz.5.1370: attempt to access beyond end of device [ 206.692825][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.706564][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.716228][T15621] syz.5.1370: attempt to access beyond end of device [ 206.716228][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.729673][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.750655][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.760650][T15621] syz.5.1370: attempt to access beyond end of device [ 206.760650][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.774614][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.785402][T15621] syz.5.1370: attempt to access beyond end of device [ 206.785402][T15621] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 206.798917][T15621] Buffer I/O error on dev loop5, logical block 2078, async page read [ 206.839755][T15629] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14868 sclass=netlink_xfrm_socket pid=15629 comm=syz.5.1370 [ 207.016092][T15642] loop0: detected capacity change from 0 to 2048 [ 207.090331][T15642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 207.143971][T15635] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 207.285493][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 207.415593][T15662] sch_fq: defrate 4294967295 ignored. [ 207.469694][T15666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15666 comm=syz.3.1376 [ 207.491692][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 207.519391][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 207.682022][T15650] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.727837][T15650] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 207.740444][T15650] EXT4-fs (loop0): This should not happen!! Data will be lost [ 207.740444][T15650] [ 207.750306][T15650] EXT4-fs (loop0): Total free blocks count 0 [ 207.756309][T15650] EXT4-fs (loop0): Free/Dirty block details [ 207.762504][T15650] EXT4-fs (loop0): free_blocks=2415919104 [ 207.768317][T15650] EXT4-fs (loop0): dirty_blocks=8208 [ 207.773681][T15650] EXT4-fs (loop0): Block reservation details [ 207.779770][T15650] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 207.814636][T15665] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 207.935231][T15445] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 208.033442][T15687] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 208.095132][T15690] lo: Caught tx_queue_len zero misconfig [ 208.102645][T15690] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 208.123581][T15690] rdma_rxe: rxe_newlink: failed to add bond0 [ 208.226344][T15704] IPv6: addrconf: prefix option has invalid lifetime [ 208.411438][T15710] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 208.961827][T15722] loop5: detected capacity change from 0 to 512 [ 209.121732][T15722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.232242][T15737] lo speed is unknown, defaulting to 1000 [ 209.294371][T15737] lo speed is unknown, defaulting to 1000 [ 209.633529][ T29] kauditd_printk_skb: 863 callbacks suppressed [ 209.633618][ T29] audit: type=1400 audit(218.464:23382): avc: denied { ioctl } for pid=15726 comm="syz.2.1392" path="socket:[27076]" dev="sockfs" ino=27076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.665092][ T29] audit: type=1400 audit(218.506:23383): avc: denied { name_connect } for pid=15726 comm="syz.2.1392" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 210.031902][ T29] audit: type=1400 audit(218.925:23384): avc: denied { name_bind } for pid=15763 comm="syz.3.1394" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 210.054832][T15764] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 210.076203][ T29] audit: type=1326 audit(218.978:23385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 210.129769][ T29] audit: type=1326 audit(219.009:23386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 210.153363][ T29] audit: type=1326 audit(219.009:23387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 210.177254][ T29] audit: type=1326 audit(219.009:23388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 210.200821][ T29] audit: type=1326 audit(219.009:23389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 210.225462][ T29] audit: type=1326 audit(219.009:23390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15769 comm="syz.1.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe4ce4df6c9 code=0x7ffc0000 [ 210.248573][ T29] audit: type=1326 audit(219.020:23391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.0.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3178f6c9 code=0x7ffc0000 [ 210.285922][T15778] netlink: 'syz.3.1398': attribute type 39 has an invalid length. [ 210.378230][T15722] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz.5.1391: lblock 23 mapped to illegal pblock 18 (length 1) [ 210.424481][T15722] EXT4-fs (loop5): Remounting filesystem read-only [ 210.457663][T15784] loop0: detected capacity change from 0 to 512 [ 210.486238][T15787] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 210.510218][T15784] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1395: error while reading EA inode 32 err=-116 [ 210.579068][T15784] EXT4-fs (loop0): Remounting filesystem read-only [ 210.599086][T15784] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 210.611271][T15794] loop3: detected capacity change from 0 to 164 [ 210.623790][T15794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 210.650933][T15784] EXT4-fs (loop0): 1 orphan inode deleted [ 210.661646][T15794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 210.679633][T15784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.694464][T15794] Symlink component flag not implemented [ 210.700134][T15794] Symlink component flag not implemented [ 210.701285][T15784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.709563][T15794] Symlink component flag not implemented (7) [ 210.721241][T15794] Symlink component flag not implemented (116) [ 210.747054][T15794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 210.758973][T15794] rock: directory entry would overflow storage [ 210.765283][T15794] rock: sig=0x4f50, size=4, remaining=3 [ 210.770961][T15794] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 210.784385][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.822386][T15809] 9pnet_fd: p9_fd_create_unix (15809): problem connecting socket: ./file0: -30 [ 210.836880][T15809] loop5: detected capacity change from 0 to 512 [ 210.901363][T15809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.943861][T15809] __nla_validate_parse: 4 callbacks suppressed [ 210.943880][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1402'. [ 210.959230][T15809] netlink: 'syz.5.1402': attribute type 30 has an invalid length. [ 210.975495][T15435] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.984997][T15435] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.993997][T15435] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.010707][T15435] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.022565][T15827] loop0: detected capacity change from 0 to 1024 [ 211.037178][T13091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.040028][T15827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.059919][T15827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.093711][T15825] loop2: detected capacity change from 0 to 1024 [ 211.103340][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 211.113889][T15827] netlink: 'syz.0.1405': attribute type 12 has an invalid length. [ 211.147539][T15838] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.180512][T15825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.255949][T15851] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 211.255949][T15851] The task syz.5.1407 (15851) triggered the difference, watch for misbehavior. [ 211.275018][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.279416][T15851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=15851 comm=syz.5.1407 [ 211.735887][T15863] loop2: detected capacity change from 0 to 512 [ 211.762211][T15863] EXT4-fs: Ignoring removed nobh option [ 211.783436][T15863] EXT4-fs (loop2): failed to initialize system zone (-117) [ 211.804649][T15863] EXT4-fs (loop2): mount failed [ 211.845299][T15863] lo speed is unknown, defaulting to 1000 [ 211.888959][T15863] lo speed is unknown, defaulting to 1000 [ 211.948687][T15856] loop3: detected capacity change from 0 to 764 [ 212.180506][T15894] lo speed is unknown, defaulting to 1000 [ 212.182375][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 212.228604][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1408'. [ 212.318590][T15894] lo speed is unknown, defaulting to 1000 [ 212.329162][T15909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15909 comm=syz.1.1412 [ 212.354647][T15909] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 212.384118][T15909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.391244][T15441] ================================================================== [ 212.399514][T15441] BUG: KCSAN: data-race in alloc_pid / copy_process [ 212.406206][T15441] [ 212.408531][T15441] read-write to 0xffffffff8685ff98 of 4 bytes by task 15434 on cpu 0: [ 212.416943][T15441] alloc_pid+0x539/0x720 [ 212.421233][T15441] copy_process+0xe25/0x2000 [ 212.425848][T15441] kernel_clone+0x16c/0x5c0 [ 212.430449][T15441] user_mode_thread+0x7d/0xb0 [ 212.435156][T15441] call_usermodehelper_exec_work+0x41/0x160 [ 212.441151][T15441] process_scheduled_works+0x4ce/0x9d0 [ 212.446716][T15441] worker_thread+0x582/0x770 [ 212.451380][T15441] kthread+0x489/0x510 [ 212.455458][T15441] ret_from_fork+0x122/0x1b0 [ 212.460056][T15441] ret_from_fork_asm+0x1a/0x30 [ 212.464826][T15441] [ 212.467146][T15441] read to 0xffffffff8685ff98 of 4 bytes by task 15441 on cpu 1: [ 212.474872][T15441] copy_process+0x17fc/0x2000 [ 212.479576][T15441] kernel_clone+0x16c/0x5c0 [ 212.484099][T15441] user_mode_thread+0x7d/0xb0 [ 212.488908][T15441] call_usermodehelper_exec_work+0x41/0x160 [ 212.494968][T15441] process_scheduled_works+0x4ce/0x9d0 [ 212.500443][T15441] worker_thread+0x582/0x770 [ 212.505036][T15441] kthread+0x489/0x510 [ 212.509112][T15441] ret_from_fork+0x122/0x1b0 [ 212.513801][T15441] ret_from_fork_asm+0x1a/0x30 [ 212.518569][T15441] [ 212.520900][T15441] value changed: 0x8000015d -> 0x8000015e [ 212.526716][T15441] [ 212.529050][T15441] Reported by Kernel Concurrency Sanitizer on: [ 212.535211][T15441] CPU: 1 UID: 0 PID: 15441 Comm: kworker/u8:15 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.546859][T15441] Tainted: [W]=WARN [ 212.550683][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.560841][T15441] Workqueue: events_unbound call_usermodehelper_exec_work [ 212.567964][T15441] ================================================================== [ 212.655348][T15909] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1412'. [ 212.701717][T15856] rock: directory entry would overflow storage [ 212.708679][T15856] rock: sig=0x4f50, size=4, remaining=3 [ 212.715005][T15856] iso9660: Corrupted directory entry in block 6 of inode 1792