last executing test programs: 5.281238322s ago: executing program 1 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_da_write_pages_extent\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x112008, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1a0}}, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd7000fbdbdf250900020073797a3000040000080041007278650014003300626f6e645f736c6176655f3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() ustat(0x2, &(0x7f0000000040)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x18, 0xa, 0x4) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000020a01"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000000) socket(0xa, 0xa, 0x3) timer_create(0x4, 0x0, 0x0) timer_create(0xfffffffffffffffd, 0x0, 0x0) timer_getoverrun(0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15880c000300040008001b000000000008000d000000010025c8f1fc6bdfe4213460f89b882248f30349086de5d3f7d3d10b76293a0c4bd9148a6c4318e76e"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) 4.645691586s ago: executing program 1 (id=411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x64041}, 0x40000) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r8) 4.165649248s ago: executing program 3 (id=417): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x2ae3, 0x956b, 0x6, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x7c}}, 0x4004944) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000019200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000019440)={&(0x7f0000000d00)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYBLOB="010025bd7000ffdbdf2545000085de3238a9ca794c8f00080001007063690011000200303030303a30304b31302e30000000000800000e0001006e657464657673697b0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e658100000000000000000008008e00000000000e000100faff7464657673696d0000000f0002006e657466657673696d30000008008e000100000008000100706369001100020030303a30303a3130000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000000f97ed89c049a84b8af9462048d5f613431c75ce164069230023e8c1343fa6d0bea6c000000000063ca7c4b269706ae52ae6101f6faecc5618fcb5e0c8d7accf4e9aa5ab6ab641216c9190929e9a0bb7fd0e595581f3b2e09c70a1e82c3a46233a947fb597d2cf99930ce4729abff3c2151b11d59f4cfb9b4886f973ffc7199e8347a03f4d34916caff2200c21486c438496684b59b80bae9a16c48c902ebd9a16b22c96ddb2e93d036d24fa774b4413d5ffa1f47589ddcf164e0db737ea6006195e1c5bd49efceae60ce5fb70055c52de8cc6c74cea113a561ed1040389a9c5cd4ecac72cd6e870f3590715145382968cd8c04bef0f99044b5aa8bd6cf2b09d9c6d59e9d"], 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES8, @ANYRES16], 0x64}}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = gettid() r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r6}) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") chmod(&(0x7f0000000200)='./file0/file0\x00', 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[], 0x53) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[r10], 0x1) mq_timedreceive(r5, &(0x7f0000000080)=""/87, 0x57, 0x1000002, 0x0) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x1, @none, 0x4, 0x2}, 0xe) 3.285771343s ago: executing program 3 (id=421): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x2) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3.282704293s ago: executing program 2 (id=423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) close_range(r2, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000700)=0x15c, r3, &(0x7f0000000800)=0x9, 0x100000007, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xd, 0x6, 0x2) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000780)="b91074bf585ca8823a64e254e49d0e44c57fda92232ce7b79d4589fa47080b605d054f7e04b9863d652880abe21d09b627ccd49119b807a64253770d8c8995ac8cce8c5277d42526a0e4d78dbaeedfeee1ac532d6414fdd8e97b91bf6992bb6cece9959ebcedde56ea475af1d0d73a0f31be75", 0x73) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x1}, {0x6}, 0x181, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x92, {0x1, 0xc, 0x40, "ccfe70a812c921ed8a2eeb6c5ed603e9677e2aeefcd566c372462724fa09cf0d41b7dc3def73dd67c76851ad024cb9259fe38ec0df16903e754bf6610e23cf26", 0x45, "6075f01486b605a6bc238222b7d017062cad2cffa4af1ae7d1b4b8f431b2208e72ce4fd03312540060b03bd59a1c42d0fbc6670c143019ba11cc42eaaf583dda6be9d9d743"}, 0x37, "6889dd242c001f7b9c4c8d21124e995893187e7833e6d2fa4e5de1e874b75eb67298da03e5cff44d87e2e6e43f795fd0120b9c76221819"}, 0xd5}) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r10, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x4, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xa10}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c002fffd90780000051a000001fffffffffe22c000000000000500000800000000090000"], 0x0) 3.281614183s ago: executing program 1 (id=424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x64080000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, 0x0, 0x0, 0xfecc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r2 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r9, 0x0, 0x6}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.039776534s ago: executing program 2 (id=426): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000080) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000440)={0xadd8, {0x32, 0xfffffffffffffff0, 0x100000000, 0x3, 0x8000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000000a0601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020605000000000000000000010000000c000300686173683a697000050001000700000009000200730400000000000005000500000000000c0007800800134000000e760d000300686173683a6d616300000000"], 0x58}, 0x1, 0x0, 0x0, 0x8091}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") readv(r1, &(0x7f0000000640)=[{&(0x7f0000000340)=""/132}, {&(0x7f0000000540)=""/94}, {&(0x7f0000001280)=""/174}, {&(0x7f0000001040)=""/253}, {&(0x7f0000000f80)=""/85, 0x1e}, {&(0x7f00000004c0)=""/71, 0xd}, {&(0x7f0000001340)=""/162}], 0x10000000000001f4) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2.702506866s ago: executing program 3 (id=428): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_open_dev$evdev(0x0, 0x4, 0x80) creat(0x0, 0x1a2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 2.679221246s ago: executing program 1 (id=429): r0 = socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc071200000f00c79e0b9971bcbe9ac0ebaad60105ff7342d69135e54c46e7a03e", 0x41}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) r2 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x87}) r3 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r3, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r3, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setregid(0x0, r6) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000000c0)={"54d51a60fabe796d94c601051381e46e", 0x0, 0x0, {0x7, 0x2}, {0x4, 0x7}, 0x8, [0x9, 0x2, 0xb, 0xfffffffffffffffd, 0x10001, 0x200, 0x6fe6c76a, 0x2, 0x9, 0x3, 0xffffffff, 0xfffffffffffffff7, 0x3, 0xffffffffffffffda, 0x8, 0x1]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) unshare(0x22020400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r10, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r11) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2.582587417s ago: executing program 1 (id=432): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) gettid() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x178, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0xfff3}, {0x0, 0x1}, {0x10, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x148, 0x2, [@TCA_FLOW_EMATCHES={0x144, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x2, 0x9, 0xb0, 0x51}}}, @TCF_EM_CONTAINER={0x74, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x7}, "8b3abb1059ddec5d6eca62cdca297380343a65dbc69eda20fe4527ff8ed31f679f1e305a5751a6ec70153b305c7568f85a96e8db11a5518bbe93536ff38b95ae99160201ca6b7499a10c86a7c59ad2ae3d2cb35a2a8108ef175d62a35d734120fd5f6a6a5d5417"}}, @TCF_EM_CONTAINER={0x9c, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x2}, "d154bf4bd86ee205b746f1248c208c2b1758b45bc3d5bc00854cf2e8f2746b68ff416120d7510f458414f76e65fa3cc50b6270df45de3320988532ae39ee58d9d49e0c0dcc21c142caec6ef65732de967e94c9710a87cdb370e30e116a5a348945ba7504470b36d3b7f02993256328c21951c31af7075fdfcbcdb112bac3e84f4669d4bd55df8bbdc107a735ab"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) close(r0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r8, 0x25, 0x4}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, r10, 0x4, r6}, 0x10) semop(r5, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r5, &(0x7f0000001240)=[{}], 0x1) semctl$GETZCNT(r5, 0x4, 0xf, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.90181212s ago: executing program 0 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) r11 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) r12 = epoll_create1(0x0) epoll_pwait(r12, &(0x7f0000000240)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) socket(0x11, 0x1, 0xfffffff9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r10, 0x0, 0xa5, 0x6c, &(0x7f0000000540)="d4ec5268040901a6dbfd94f5f8857e4e0a4e5ca17ed5d702cb07ebf80dffcaa09fa87e9b2ae438aeeb3d0fc8b26082c54516d88c95cedae9a62a6d78f0c19832ffb24707005b601bd3365284b8c482dabe5e20aecf1cffe445a348284c7dce03856853e18ff63061799a4351c7cb5693874e194812c9875327e1fbcf84fb8f2fd9bc68e1ad83ae733c81aa0e88ca3958d14f33859fd336743d67f145e14c6b4a6281449148", &(0x7f00000003c0)=""/108, 0x2, 0x0, 0x6b, 0xfa, &(0x7f0000000680)="a860fd0a8365550bc0f1f6d0b8f56fd53a4e4d7fedd3f73ee7f6cd147d750c416c6952b3ec88c48d2d828737af160d2edebf760ea6e5d31b21340b67ff0e386bdb8739c8d3e0d30d9aa0ca88d8966f96cfc83c2b7e1c1d05178d4197e31e965674d7fa4c5ccc152e5aa26e", &(0x7f0000000700)="f09b53d49c7fb8781a5feaab5a685069569c94413044fb18d419579b9670ca4f76c9731ab54e93aa9151013a9540474ef0c494f2b520b991bdeea52def6c49a28f4006d5aa2535c64c7b4f02ce2ee7fb157bbe1bf6596b426dd24bbabc80722609713f4e5c28f3a3d2d43e959dd8c066e6b30b66eb00b7d3e95d3eb96c9017853fec27c7b50e194cf83dbf6444f62db307eb1a9e68af3bf0670d53ed8edddf320a2f2a3c9c8faf518fb3e118af7a4d8ef470ddc9da3fbe72b199cce24ca15e7310f2961eb90f4998c8eea637a8dd2d119e571e01d4b3c7f47c529d926878d383573abcfa0466c33e984b871e19b56d04834908228e9087f4eeb8", 0x6, 0x0, 0x6}, 0x50) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) connect$nfc_raw(r7, &(0x7f0000000900)={0x27, 0x0, 0x0, 0x4}, 0x10) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) 1.426362402s ago: executing program 4 (id=436): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r7 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r8, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f00000005c0)='./file0\x00', 0x44000c93) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) 1.221928654s ago: executing program 3 (id=437): unshare(0x22020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) bind$netlink(r2, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) listen(r2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000ec2"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x80000001, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1010401, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="a000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000800000007800128008000100767469006c00028008000600f2ffffff08000600010000000800030000000000080002000200000008000400e0000002080003000500000008000100", @ANYRES32, @ANYBLOB="08000500640101010800060009000000080002000000fd0008000100", @ANYRES32], 0xa0}, 0x1, 0x0, 0x0, 0x2000d818}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000300000018110000", @ANYRES32=r5, @ANYBLOB="0000010000000000b702000014000000b70300000000000083000000bf090000000000005509010000000000950000000000000085100000fbffffff950000000000000085100000000000001812000082dc8cce7a671c53ea64fcd8469adad0c29ebe8901c6982d", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000005d97180000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0xc, 0x6, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000180)=[{0x4, 0x2, 0x2, 0x7}, {0x5, 0x2, 0x9, 0xa}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x9b, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.131461764s ago: executing program 3 (id=438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r11}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c10010000000000007000000180100002020742500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000070000008500000017000000850000000e00000095"], 0x0, 0xcdc4, 0x0, 0x0, 0x41000, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xa, @loopback}], 0x1c) 1.129209994s ago: executing program 4 (id=439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x51) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRESDEC=r6, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xfff, 0x0, 0x46, 0x1e90000000000000}, &(0x7f0000000580)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f00000005c0)={r12, 0x7}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, 0x0, &(0x7f0000001c40)=r10}, 0x20) unshare(0x64000600) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r13, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r13, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000c0a100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095000000000000009479af871a355aa379d1b4e44892d64f76e694eb701ae6d7cb026f6205096b62f7a052351a18d5a10ecfea85a6c5aac85228c00974291b7f6a5413c74e60943a3d4cf40e305e1ba93827218856e7774752bb9a35c95e9be583d12115d8d6d84554447a1c9434a1971a4d20e41f87"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x5d}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d79"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000080)='./file0\x00') 1.002366885s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x40) r2 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004088}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x10, 0x20, 0x2, 0xffffffff, {{0x18, 0x4, 0x3, 0x5, 0x60, 0x68, 0x0, 0x1f, 0x2f, 0x0, @broadcast, @multicast2, {[@noop, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x1, [0x1, 0xfdb, 0x9, 0x1ff, 0x3]}, @noop, @timestamp={0x44, 0x28, 0x74, 0x0, 0xd, [0x10001, 0x9, 0x8, 0x188, 0x5, 0x7, 0x4, 0x346, 0x10]}, @lsrr={0x83, 0xfffffffffffffe41, 0xf7}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r9, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r0, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r13, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'syzkaller0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000a00)={0x614, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd26}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x83}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3312}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100b}}}]}}, {{0x8, 0x1, r6}, {0x1fc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1200000}}, {0x8, 0x6, r15}}}]}}]}, 0x614}}, 0x80) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 854.183765ms ago: executing program 0 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r5, 0x0, 0xa}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {0x1}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffff225}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfde}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x7}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000, 0x0, 0xffffffff}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4, 0x78d}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r8, &(0x7f0000000780)=[{&(0x7f0000001440)="77be84c5e1d9540d0500f2589781f705267ee40e07de62d422fcf14690bea6df9ff392b473dada0648ce160cd4efd6360353e59f73e6dd25281174f05f60f688e11c5407dc71f3d75cb61f335b09c04555921726ceb2a885baf13bf4cba8ebdcb5d2d62f14170da553c3b552e0d3e501ec3bdea7de19dbe87c677900a6b8ddeffac60302fcd5b8837dc7cad59e0af7d274599fb3c29e3cab8751e6cb4b1b44fdde0b3e45c2d3a11453938467cd64ccbb8a7530fc5b251b21c4654933316f0514536f791a5ed7f7ab3c79c2154bfe520e3a1cf5a9dd7b53f24f231b387a6c225dcab7c3fced74d42b9b371fd208097cc3c83fd29bd44993086db6c2eb2d09bab7ca1883797d68edfb4aab380319e1e3a6a02c8c4018350f0812bf52f21898d35263efac9c223b14e273f9dc6d5d5409a7db686d894f1aed1a173bc448e6f25c040144db035147eff5f68c36f9669b0050576cfa60ce4c63d0946d0711c1cc0e61c83be1492ed40a47a80bbf4073300ff1e04941bcbc7a5fe00fff3e95feccb100135295f609cc4aae21018565ae5b4a5fe87fce9566c5c101f881fe16a7ae0c6007391277bf234af09daaae", 0x1ab}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) 679.441126ms ago: executing program 4 (id=442): io_setup(0x4082, &(0x7f0000000380)=0x0) r1 = syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200e45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x5f}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r9, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r9}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) r11 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r11, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x6b) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r12}}, 0x48) 678.739006ms ago: executing program 0 (id=452): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x10}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) read(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0xfffd, 0x18, 0x0, 0x16, 0x0, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891e, &(0x7f00000006c0)={'vcan0\x00', @ifru_hwaddr=@remote}) fsmount(r4, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdnR?', @ANYRES16=r1, @ANYRES64=r3]) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000600)) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") sendmsg$nl_route_sched(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 678.123976ms ago: executing program 2 (id=443): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x242500, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1}, 0xc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0xf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0xfe33) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000080)=0x76960bb5) write$evdev(r6, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x5}, {}], 0x30) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c82, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x80047456, &(0x7f0000000040)={0x3, 0x3, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) uname(&(0x7f0000000000)=""/119) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 620.909407ms ago: executing program 2 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x5660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r10 = dup3(r7, r5, 0x80000) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040), 0x0) r11 = openat$nvram(0xffffffffffffff9c, 0x0, 0x7c89f8f354db676e, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route(r12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, 0x0, 0x4000084) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, 0x0) r13 = openat(0xffffffffffffff9c, 0x0, 0xa02, 0xc1) sendfile(r13, r13, 0x0, 0x2) 442.537438ms ago: executing program 2 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000000000000000000000000bdc557479202afc8fa4cb40ded46a8a3c231add2252bfddf8f12a7a3e344851669711976efc1507ffe21d6232700205090b2a27042f04eed1099d9169ccebf53ac7e864927ecada3cac5c6360d0c1a6f7c65f7baeeb7102d42fb1adda9949569966f6d8466bb051745daf9650dc3f2d979268a197a0e57ee9bd4b62e8e94f4c98cb43f9cf24fce6fbcbf23b43784b2d4f13fe27bc8e357c0b0509acdb606b8d038313d66773085974bd79a3002", @ANYRES32, @ANYBLOB="a600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000008fd00000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009557c80dfd119f3df7905fc4db3b4906befb09c6d4a06ff5997e036c9090c5c2103aeebf87750e233b2b83db091fdf4e22383bd40b3ab64f40677ce99a58bd8bc3b57e2ab9"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000009c0)={r8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x9, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000700000000000000060000f248480085200000050000009500000000000013"], &(0x7f0000000300)='GPL\x00', 0x3c, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x5, 0xa, 0x0, 0xbf8}, 0x10, 0x0, r6, 0x7, &(0x7f0000000800)=[0xffffffffffffffff, r4, r3], &(0x7f0000000840)=[{0x2, 0x2, 0xb, 0x1}, {0x1, 0x2, 0x8, 0x4}, {0x0, 0x1, 0x6, 0xb}, {0x0, 0x5, 0x2, 0x7}, {0x2, 0x1, 0x6, 0x2}, {0x2, 0x3, 0xb, 0x3}, {0x0, 0x5, 0x10}]}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) connect$vsock_stream(r7, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 393.546758ms ago: executing program 2 (id=446): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES64=r0, @ANYRES16=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32=0xffffffffffffffff, @ANYBLOB], 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x80003, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) listen(r7, 0x39c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x13, 0xb251, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x2, 0x2}, 0x3800, 0x1ff, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r8, @ANYBLOB="02f864e2a615c7014dff6a956688023465c5bf7bb57a4b88b8a9e09ca449510ca9b2587ce16a0457a670edea612dae7e55d3876aec5ae4a0943ef848163beac95d3855303b2238995bb48a4a212a9c6527257f13b83849271c324913bfe3df7e2e17f35c92f163eb51c6d48bd51a36b85c76f5a80eedda12c4a1cc06c54ccff631462a0f02443e926f0d7f66e036790cfdb1a88829d6b43080dcdd7124d450cad28ea03eb5648423fc03f064e7cc57", @ANYRESDEC=r4, @ANYRES8, @ANYRES16=r8], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r11, &(0x7f0000000200), 0x0, 0x0, 0x3) 335.308908ms ago: executing program 4 (id=447): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000002c0), 0x64, 0x50a, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'macvlan0\x00'}}, 0x1e) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000500)={[{@mb_optimize_scan}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$eJzs3U9rVFcbAPDnTjJGje9rBJHXd1ECLmqxTkzSPxa6sMvSSgPt3oZkDJKJI8lETCqoi7rppkihlAqlH6B7l9Iv0E8hVEGKhHbRRafcyR0zSWaSSRzNmPn9YDLn3Hsn5z733nPmnDkz3AB61nD6JxdxMiK+TSKONqzrj2zl8Op2K89uTqWPJKrVz/9IIsmW1bdPsufBLPO/iPj164gzuc3lLiwtz06WSsX5LD9Smbs2srC0fPbK3ORMcaZ4dWx8/Py742MfvP/e5hcP7C7Wtyb++uGzhx+f/+bUyve/PDl2L4kLcSRb1xjHC7jdmBmO4eyY5OPChg1HO1BYN0n2egfYlb6snucjbQOORl9W64H971ZEVIEelaj/0KPq/YD62H7LcXB1/43ynn5UGwANbI4/Wf1sJA7WxkaHV5J1I6P0SAx1oPy0jAeP79978Dg7Ibc68jkEwLZu34mIc/3969q//0ZD+7d759rYZmMZHfocFmjDw7T/8/ZAk/5f7nn/Jxr6P7PZ6wab1N3d2L7+5550oJiW0v7fh037v88nrYb6stx/an2+fHL5SqmYtm1pM3k68gNpfqv5nPMrj6qt1q31/1Yfafnp89oWuSf9G+a7picrky8Sc6OndyL+398s/rX+b9Kk/5sej4k2yzhRvP9Gq3Xbx/9yVX+OeLPp+V8b6yTr5idPbpyfHKldDyP1q2KzP++e+K1V+Xsdf3r+D28d/1DSOF+7sPMyfjr4d7HVuuEkmzTd4fV/IPmilj6QLbsxWanMj0YcSD7dvHxs7bX1fH37NP7Tp5rX/62u/0MR8WWb8d89frflpm2f/3ybhe1QGv/0js5/i0Q1abnq0Sdf/bj7+NPz/04tdTpb0k77t8Werku8yLEDAAAAAACAbpOLiCOR5Aq19ME4ErlcobD6/Y7jcThXKi9UzlwuL16djtpvZYcin6vPdA82fB9iNPs+bD0/tiE/HhHHIuK7vkO1fGGqXJre6+ABAAAAAAAAAAAAAAAAAACgSwyu+/1/PP/9f+r3vr3eO+ClW7uxwcQub60PvK62veV/J+70BHSlLer//rvjL7DOtu//wL6l/kPvarf+//OS9wN49bz/Q+9S/6F3qf/Qu9R/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KiJixfTR3Xl2c2pND99fWlxtnz97HRxYbYwtzhVmCrPXyvMlMszpWJhqhxD2/y/Url8bXQsFm+MVIpJZWRhafnSXHnxauXSlbnJmeKlYv7VhAUAAAAAAAAAAAAAAAAAAACvlYWl5dnJUqk4LyHRfiIfEdmS/m7Yn04lqtVqtQt2oxsSe90yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCafwMAAP//jeA8bA==") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r3], &(0x7f0000000180)=""/17, 0x8d, 0x11, 0x1, 0x80000001}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42103, 0x71) 251.834629ms ago: executing program 0 (id=448): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB='<4\x00\x00\x00'], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) get_mempolicy(0x0, &(0x7f00000000c0), 0xcc, &(0x7f0000ffb000/0x2000)=nil, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000580)={0x0, @remote, @empty}, &(0x7f00000005c0)=0xc) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={0x194, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x82, 0x5, "d93a561523579c31b35bde23aa5c2d73f805a838cc9ac10198e840dc8f771383af50195c2f8389a0f4dc4bb0ae22964324ee1d4668eddaef42496edfc14c3be545e76e76d57f9dabf7044c880629ae19d680f1a23b68fb52c7161a4ecaacbb283aee2bd2e6b1c18af868e9f4443ac9907253cb935ab24a7d939746eea1d8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4840}, 0x2) ioctl$TCSETA(0xffffffffffffffff, 0x5405, 0xffffffffffffffff) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r11, 0x2405, r3) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 170.282189ms ago: executing program 0 (id=449): unshare(0x22020000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0x0) bind$netlink(r2, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) listen(r2, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000ec2"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x80000001, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1010401, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="a000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000800000007800128008000100767469006c00028008000600f2ffffff08000600010000000800030000000000080002000200000008000400e0000002080003000500000008000100", @ANYRES32, @ANYBLOB="08000500640101010800060009000000080002000000fd0008000100", @ANYRES32], 0xa0}, 0x1, 0x0, 0x0, 0x2000d818}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x21, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000300000018110000", @ANYRES32=r5, @ANYBLOB="0000010000000000b702000014000000b70300000000000083000000bf090000000000005509010000000000950000000000000085100000fbffffff950000000000000085100000000000001812000082dc8cce7a671c53ea64fcd8469adad0c29ebe8901c6982d", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000005d97180000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0xc, 0x6, 0x7f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000180)=[{0x4, 0x2, 0x2, 0x7}, {0x5, 0x2, 0x9, 0xa}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x9b, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 160.944849ms ago: executing program 0 (id=450): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r4 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r4, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff28, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040000) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000b, 0x2013, r7, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000004c0), 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syslog(0x2, &(0x7f00000000c0)=""/88, 0x58) 0s ago: executing program 4 (id=451): io_uring_setup(0xf09, &(0x7f0000000600)={0x0, 0x4ff46, 0x3890, 0x87, 0x400363}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x2ad6, 0x0, &(0x7f0000000440)=0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRESHEX=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r2, 0x7f, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000800)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000880)="527f01d396bde38f83e5b11d872043b5bbbf993e1c5e75305b604cb4a71d1c0d9aeb914b581b606734aa48dec88911f00f985103000000e9c7bb88e0f13571830c0000000000000857e28408652b4da97c4ee32a7a9956eb552ca69867d38207920d832bb2ae6f65a39e805c9e7c668c677b3d82f98d5c366f06e5610d87601eb11789375bfef62518597045deffd92aeff90d6cc5c5477dd39dfa80dddcdd70432ad0814ddcc87fb9650c42fc36e9047c68721044a9fb99f57f421f2c101979d3c8c8", 0xc3}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) kernel console output (not intermixed with test programs): mm="syz.1.20" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 32.226577][ T29] audit: type=1400 audit(1762427790.191:386): avc: denied { open } for pid=3578 comm="syz.1.20" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 32.289451][ T3577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.301873][ T29] audit: type=1326 audit(1762427790.241:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 32.325342][ T29] audit: type=1326 audit(1762427790.241:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 32.348729][ T29] audit: type=1326 audit(1762427790.251:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="syz.4.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 32.371862][ T29] audit: type=1326 audit(1762427790.251:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 32.394644][ T29] audit: type=1326 audit(1762427790.251:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 32.432798][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.538000][ T3584] x_tables: duplicate underflow at hook 3 [ 32.581020][ T3598] loop1: detected capacity change from 0 to 1024 [ 32.635509][ T3598] EXT4-fs: inline encryption not supported [ 32.641368][ T3598] EXT4-fs: Ignoring removed i_version option [ 32.662308][ T3598] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.692213][ T3598] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.23: pblk 67 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 32.730935][ T3584] loop4: detected capacity change from 0 to 512 [ 32.731733][ T3598] EXT4-fs error (device loop1): ext4_quota_enable:7139: comm syz.1.23: Bad quota inode: 3, type: 0 [ 32.753092][ T3598] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 32.781839][ T3598] EXT4-fs (loop1): mount failed [ 32.797061][ T3584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.893201][ T3584] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.970546][ T3601] loop2: detected capacity change from 0 to 8192 [ 33.151160][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.176852][ T3624] SELinux: failed to load policy [ 33.202259][ T3624] SELinux: failed to load policy [ 33.241753][ T3631] loop0: detected capacity change from 0 to 512 [ 33.258480][ T3631] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=,fsuuid=2e07,errors=continue) failed with errno=-22 [ 33.339846][ T3631] loop0: detected capacity change from 0 to 128 [ 33.377106][ T3631] syz.0.26: attempt to access beyond end of device [ 33.377106][ T3631] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 33.437407][ T3631] syz.0.26: attempt to access beyond end of device [ 33.437407][ T3631] loop0: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 33.453030][ T3647] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'. [ 33.472431][ T3647] netlink: 156 bytes leftover after parsing attributes in process `syz.1.28'. [ 33.482065][ T3631] syz.0.26: attempt to access beyond end of device [ 33.482065][ T3631] loop0: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 33.495451][ T3631] Buffer I/O error on dev loop0, logical block 75, lost async page write [ 33.526499][ T3631] syz.0.26: attempt to access beyond end of device [ 33.526499][ T3631] loop0: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 33.539863][ T3631] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 33.570612][ T3631] syz.0.26: attempt to access beyond end of device [ 33.570612][ T3631] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 33.678977][ T3660] loop1: detected capacity change from 0 to 1024 [ 33.688687][ T3660] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 33.702304][ T3660] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.717884][ T3660] EXT4-fs (loop1): invalid journal inode [ 33.841840][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 33.850891][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 33.873264][ T3668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.901072][ T3670] loop3: detected capacity change from 0 to 1024 [ 33.908015][ T3670] EXT4-fs: Ignoring removed orlov option [ 33.916838][ T3670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.933147][ T3668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.956809][ T3674] loop0: detected capacity change from 0 to 1024 [ 33.976823][ T3674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.989138][ T3674] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.006868][ T3668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.034061][ T3674] syz.0.35 (3674): attempted to duplicate a private mapping with mremap. This is not supported. [ 34.047238][ T3674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.35'. [ 34.060483][ T3668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.061526][ T3674] netlink: 'syz.0.35': attribute type 39 has an invalid length. [ 34.075163][ T3678] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.091360][ T3674] veth1_macvtap: left promiscuous mode [ 34.098054][ T3678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 34.112106][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 34.131516][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.144215][ T1885] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.187740][ T1885] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.203447][ T1885] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.216578][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.431691][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.464869][ T3681] loop4: detected capacity change from 0 to 8192 [ 34.568455][ T3693] Bluetooth: hci0: Frame reassembly failed (-90) [ 34.598157][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.627605][ T3692] netlink: 56 bytes leftover after parsing attributes in process `syz.3.39'. [ 34.729476][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 34.740235][ T3493] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 34.761446][ T3701] loop2: detected capacity change from 0 to 2048 [ 34.826192][ T3305] Alternate GPT is invalid, using primary GPT. [ 34.832627][ T3305] loop2: p1 p2 p3 [ 34.836364][ T3305] loop2: partition table partially beyond EOD, truncated [ 34.868879][ T3701] Alternate GPT is invalid, using primary GPT. [ 34.875328][ T3701] loop2: p1 p2 p3 [ 34.879108][ T3701] loop2: partition table partially beyond EOD, truncated [ 34.956371][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.968835][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 34.980263][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.039612][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 35.039869][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 35.061050][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.441011][ T3696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.709127][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 35.759699][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.774962][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.842753][ T3727] fido_id[3727]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.885294][ T3729] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.905586][ T3729] netlink: zone id is out of range [ 35.910734][ T3729] netlink: zone id is out of range [ 35.920226][ T3729] netlink: zone id is out of range [ 35.925617][ T3729] netlink: zone id is out of range [ 35.931187][ T3729] netlink: zone id is out of range [ 35.936573][ T3729] netlink: zone id is out of range [ 35.941833][ T3729] netlink: zone id is out of range [ 35.947366][ T3729] netlink: del zone limit has 8 unknown bytes [ 35.995220][ T3733] loop3: detected capacity change from 0 to 512 [ 36.001992][ T3733] EXT4-fs: Ignoring removed nobh option [ 36.034956][ T3733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.082453][ T3733] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.48: corrupted inode contents [ 36.111132][ T3733] EXT4-fs (loop3): Remounting filesystem read-only [ 36.127243][ T3733] EXT4-fs (loop3): 1 truncate cleaned up [ 36.137935][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.177157][ T3733] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.403050][ T3745] Zero length message leads to an empty skb [ 36.415655][ T3745] netlink: 'syz.1.51': attribute type 4 has an invalid length. [ 36.602966][ T3740] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 36.620737][ T3740] 9pnet_fd: Insufficient options for proto=fd [ 36.627039][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.633195][ T3694] Bluetooth: hci0: command 0x1003 tx timeout [ 36.756346][ T3756] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 36.756346][ T3756] The task syz.2.53 (3756) triggered the difference, watch for misbehavior. [ 36.774901][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.883783][ T3763] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 36.893778][ T3762] IPVS: stopping master sync thread 3763 ... [ 36.914729][ T3764] hub 1-0:1.0: USB hub found [ 36.951374][ T3764] hub 1-0:1.0: 8 ports detected [ 36.957108][ T3766] capability: warning: `syz.3.54' uses deprecated v2 capabilities in a way that may be insecure [ 37.025342][ T3762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.155773][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 37.155865][ T29] audit: type=1400 audit(1762427795.171:925): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.213642][ T29] audit: type=1326 audit(1762427795.231:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.236968][ T29] audit: type=1326 audit(1762427795.231:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.260233][ T29] audit: type=1326 audit(1762427795.231:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.283339][ T29] audit: type=1326 audit(1762427795.231:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.306518][ T29] audit: type=1326 audit(1762427795.231:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.329757][ T29] audit: type=1326 audit(1762427795.231:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.352810][ T29] audit: type=1326 audit(1762427795.231:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.375979][ T29] audit: type=1326 audit(1762427795.231:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.399130][ T29] audit: type=1326 audit(1762427795.231:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 37.480984][ T3774] loop4: detected capacity change from 0 to 32768 [ 37.523276][ T3774] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 37.528997][ T3774] loop4: p1 start 460800 is beyond EOD, truncated [ 37.535563][ T3774] loop4: p2 size 83886080 extends beyond EOD, truncated [ 37.552680][ T3774] loop4: p5 start 460800 is beyond EOD, truncated [ 37.559154][ T3774] loop4: p6 size 83886080 extends beyond EOD, truncated [ 37.615460][ T3776] SELinux: ebitmap: truncated map [ 37.627123][ T3776] SELinux: failed to load policy [ 37.783986][ T3788] Driver unsupported XDP return value 0 on prog (id 66) dev N/A, expect packet loss! [ 37.830999][ T3796] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.840176][ T3796] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 37.936647][ T3799] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.022409][ T3797] loop1: detected capacity change from 0 to 32768 [ 38.067781][ T3784] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 38.074415][ T3784] loop1: p1 start 460800 is beyond EOD, truncated [ 38.081052][ T3784] loop1: p2 size 83886080 extends beyond EOD, truncated [ 38.098679][ T3784] loop1: p5 start 460800 is beyond EOD, truncated [ 38.105293][ T3784] loop1: p6 size 83886080 extends beyond EOD, truncated [ 38.116958][ T3797] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 38.126690][ T3797] loop1: p1 start 460800 is beyond EOD, truncated [ 38.133228][ T3797] loop1: p2 size 83886080 extends beyond EOD, truncated [ 38.144182][ T3797] loop1: p5 start 460800 is beyond EOD, truncated [ 38.150659][ T3797] loop1: p6 size 83886080 extends beyond EOD, truncated [ 38.758996][ T3811] loop3: detected capacity change from 0 to 512 [ 38.769623][ T3811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.786298][ T3817] loop1: detected capacity change from 0 to 1024 [ 38.800568][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.814299][ T3811] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.815478][ T3817] __nla_validate_parse: 3 callbacks suppressed [ 38.815492][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 38.822418][ T3811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 38.829339][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.849548][ T3811] System zones: 0-1, 15-15 [ 38.852794][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.864878][ T3811] , 18-18, 34-34 [ 38.865492][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.868611][ T3811] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.875877][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.882393][ T3811] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 38.903887][ T3811] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 38.912046][ T3811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.64: bg 0: block 40: padding at end of block bitmap is not set [ 38.926599][ T3811] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 38.935617][ T3811] EXT4-fs (loop3): 1 truncate cleaned up [ 38.941839][ T3811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.048802][ T3811] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.64: bad symlink. [ 39.071343][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.095894][ T3826] loop4: detected capacity change from 0 to 512 [ 39.103617][ T3826] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 39.129029][ T3831] loop1: detected capacity change from 0 to 1024 [ 39.139304][ T3831] EXT4-fs: Ignoring removed orlov option [ 39.145225][ T3831] ext4: Unknown parameter 'smackfshat' [ 39.181516][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.220533][ T3835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.235331][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 39.338236][ T3837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.71'. [ 39.368331][ T3841] loop3: detected capacity change from 0 to 2048 [ 39.404293][ T3784] Alternate GPT is invalid, using primary GPT. [ 39.410689][ T3784] loop3: p2 p3 p7 [ 39.428434][ T3841] Alternate GPT is invalid, using primary GPT. [ 39.434912][ T3841] loop3: p2 p3 p7 [ 39.493711][ T3845] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 39.537415][ T3847] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 39.571546][ T3802] udevd[3802]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 39.583555][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.584108][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.678608][ T3853] bridge0: port 3(batadv1) entered blocking state [ 39.685193][ T3853] bridge0: port 3(batadv1) entered disabled state [ 39.704083][ T3853] batadv1: entered allmulticast mode [ 39.751109][ T3853] batadv1: entered promiscuous mode [ 39.775474][ T3860] program syz.1.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.804116][ T3856] loop2: detected capacity change from 0 to 2048 [ 39.826425][ T3862] program syz.1.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.840622][ T3856] EXT4-fs: Ignoring removed bh option [ 39.853306][ T3862] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 39.993812][ T3856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.222020][ T1885] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 40.231314][ T1885] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 40.258698][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.537697][ T3877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3877 comm=syz.3.83 [ 40.670360][ T3874] atomic_op ffff8881190b2128 conn xmit_atomic 0000000000000000 [ 40.844422][ T3874] loop1: detected capacity change from 0 to 1024 [ 40.870018][ T3874] EXT4-fs: Ignoring removed nobh option [ 40.875649][ T3874] EXT4-fs: Ignoring removed nobh option [ 40.895650][ T3874] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 40.926679][ T3874] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.81: inode #4294967295: comm syz.1.81: iget: illegal inode # [ 40.976519][ T3874] EXT4-fs (loop1): no journal found [ 40.981787][ T3874] EXT4-fs (loop1): can't get journal size [ 41.018512][ T3874] EXT4-fs (loop1): failed to initialize system zone (-22) [ 41.041916][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 41.052990][ T3323] CPU: 0 UID: 0 PID: 3323 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 41.053037][ T3323] Tainted: [W]=WARN [ 41.053045][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.053058][ T3323] Call Trace: [ 41.053065][ T3323] [ 41.053072][ T3323] __dump_stack+0x1d/0x30 [ 41.053092][ T3323] dump_stack_lvl+0xe8/0x140 [ 41.053184][ T3323] dump_stack+0x15/0x1b [ 41.053203][ T3323] dump_header+0x81/0x220 [ 41.053223][ T3323] oom_kill_process+0x342/0x400 [ 41.053259][ T3323] out_of_memory+0x979/0xb80 [ 41.053361][ T3323] try_charge_memcg+0x610/0xa10 [ 41.053390][ T3323] charge_memcg+0x51/0xc0 [ 41.053416][ T3323] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 41.053493][ T3323] __read_swap_cache_async+0x17b/0x2d0 [ 41.053515][ T3323] swap_cluster_readahead+0x262/0x3c0 [ 41.053605][ T3323] swapin_readahead+0xde/0x6f0 [ 41.053627][ T3323] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 41.053670][ T3323] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 41.053729][ T3323] ? __rcu_read_unlock+0x4f/0x70 [ 41.053833][ T3323] ? swap_cache_get_folio+0x277/0x280 [ 41.053852][ T3323] do_swap_page+0x2ae/0x2370 [ 41.053876][ T3323] ? __pfx_default_wake_function+0x10/0x10 [ 41.053907][ T3323] handle_mm_fault+0x9a5/0x2be0 [ 41.054016][ T3323] ? vma_start_read+0x141/0x1f0 [ 41.054069][ T3323] do_user_addr_fault+0x630/0x1080 [ 41.054092][ T3323] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.054120][ T3323] exc_page_fault+0x62/0xa0 [ 41.054217][ T3323] asm_exc_page_fault+0x26/0x30 [ 41.054273][ T3323] RIP: 0033:0x7f4d3062eb61 [ 41.054289][ T3323] Code: 8d 4c 21 d2 41 8b 46 20 41 0f b6 4e 24 48 f7 e2 4c 01 c0 48 83 d2 00 48 0f ad d0 48 d3 ea f6 c1 40 48 0f 44 d0 e9 61 ff ff ff <4c> 89 45 c0 31 c0 49 81 f8 00 ca 9a 3b 72 1c 31 d2 49 81 c0 00 36 [ 41.054342][ T3323] RSP: 002b:00007ffcc33effc0 EFLAGS: 00010246 [ 41.054359][ T3323] RAX: 0000000000001ae6 RBX: 00007f4d30628038 RCX: 0000000000000028 [ 41.054372][ T3323] RDX: 000000003a8851cb RSI: 00007ffcc33f00e0 RDI: 0000000000000001 [ 41.054386][ T3323] RBP: 00007ffcc33f0030 R08: 000000003a8851cb R09: 7fffffffffffffff [ 41.054399][ T3323] R10: 3fffffffffffffff R11: 0000000000000202 R12: 4000000000000000 [ 41.054410][ T3323] R13: 0000000000000010 R14: 00007f4d30628000 R15: 0000000000001ae6 [ 41.054427][ T3323] [ 41.054434][ T3323] memory: usage 307200kB, limit 307200kB, failcnt 514 [ 41.288571][ T3323] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 41.296561][ T3323] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 41.303852][ T3323] Memory cgroup stats for /syz4: [ 41.306560][ T3874] EXT4-fs (loop1): mount failed [ 41.439240][ T3323] cache 0 [ 41.442309][ T3323] rss 0 [ 41.445055][ T3323] shmem 0 [ 41.447990][ T3323] mapped_file 0 [ 41.451442][ T3323] dirty 0 [ 41.454509][ T3323] writeback 0 [ 41.457857][ T3323] workingset_refault_anon 13 [ 41.462528][ T3323] workingset_refault_file 9 [ 41.467039][ T3323] swap 667648 [ 41.470338][ T3323] swapcached 4096 [ 41.474006][ T3323] pgpgin 7964 [ 41.477462][ T3323] pgpgout 7963 [ 41.480826][ T3323] pgfault 9630 [ 41.484300][ T3323] pgmajfault 11 [ 41.487813][ T3323] inactive_anon 4096 [ 41.491820][ T3323] active_anon 0 [ 41.495342][ T3323] inactive_file 0 [ 41.498969][ T3323] active_file 0 [ 41.502483][ T3323] unevictable 0 [ 41.505932][ T3323] hierarchical_memory_limit 314572800 [ 41.511384][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 41.517655][ T3323] total_cache 0 [ 41.521225][ T3323] total_rss 0 [ 41.524518][ T3323] total_shmem 0 [ 41.527964][ T3323] total_mapped_file 0 [ 41.531938][ T3323] total_dirty 0 [ 41.535414][ T3323] total_writeback 0 [ 41.539210][ T3323] total_workingset_refault_anon 13 [ 41.544371][ T3323] total_workingset_refault_file 9 [ 41.549439][ T3323] total_swap 667648 [ 41.553275][ T3323] total_swapcached 4096 [ 41.557421][ T3323] total_pgpgin 7964 [ 41.561224][ T3323] total_pgpgout 7963 [ 41.565227][ T3323] total_pgfault 9630 [ 41.569113][ T3323] total_pgmajfault 11 [ 41.573108][ T3323] total_inactive_anon 4096 [ 41.577516][ T3323] total_active_anon 0 [ 41.581499][ T3323] total_inactive_file 0 [ 41.585781][ T3323] total_active_file 0 [ 41.589777][ T3323] total_unevictable 0 [ 41.593855][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.76,pid=3850,uid=0 [ 41.608316][ T3323] Memory cgroup out of memory: Killed process 3850 (syz.4.76) total-vm:96004kB, anon-rss:1136kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 41.640219][ T3893] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 41.666179][ T3886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.722592][ T3893] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 41.780706][ T3899] loop2: detected capacity change from 0 to 2048 [ 42.217144][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 42.217159][ T29] audit: type=1400 audit(1762427800.231:1429): avc: denied { setopt } for pid=3911 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.423227][ T29] audit: type=1400 audit(1762427800.271:1430): avc: denied { read } for pid=3911 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.443549][ T29] audit: type=1400 audit(1762427800.271:1431): avc: denied { compute_member } for pid=3903 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.552282][ T3918] infiniband siz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.800695][ T29] audit: type=1400 audit(1762427800.481:1432): avc: denied { read write } for pid=3917 comm="syz.4.92" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.824108][ T29] audit: type=1400 audit(1762427800.481:1433): avc: denied { open } for pid=3917 comm="syz.4.92" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 42.847934][ T29] audit: type=1400 audit(1762427800.501:1434): avc: denied { mounton } for pid=3903 comm="syz.1.89" path="/23/file0" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 42.870613][ T29] audit: type=1400 audit(1762427800.511:1435): avc: denied { write } for pid=3913 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.876519][ T3922] Option 'Ú¼ÂeFœýØ 2Í‚úØ ·æÞÅ ¡†¶K¡…*Ϫã,ÛŸÊn‰yBÞ6Îf[åA [ 42.876519][ T3922] Q¿ñí׿2:[¼„‚”·¶éÇkáz' to dns_resolver key: bad/missing value [ 42.891013][ T29] audit: type=1400 audit(1762427800.511:1436): avc: denied { read } for pid=3913 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.926503][ T29] audit: type=1400 audit(1762427800.541:1437): avc: denied { create } for pid=3917 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.945828][ T29] audit: type=1400 audit(1762427800.541:1438): avc: denied { write } for pid=3917 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.032291][ T3925] hub 1-0:1.0: USB hub found [ 43.037115][ T3925] hub 1-0:1.0: 8 ports detected [ 43.140307][ T3931] loop3: detected capacity change from 0 to 1024 [ 43.177322][ T3931] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 43.187268][ T3931] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 43.218353][ T3931] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.229493][ T3931] EXT4-fs error (device loop3): ext4_get_journal_inode:5808: inode #5: comm syz.3.96: unexpected bad inode w/o EXT4_IGET_BAD [ 43.242781][ T3931] EXT4-fs (loop3): no journal found [ 43.248032][ T3931] EXT4-fs (loop3): can't get journal size [ 43.258864][ T3931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.289053][ T3929] netlink: 'syz.0.97': attribute type 4 has an invalid length. [ 43.325075][ T3934] netlink: 76 bytes leftover after parsing attributes in process `syz.1.98'. [ 43.415977][ T3942] xt_hashlimit: max too large, truncated to 1048576 [ 43.587763][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 43.646569][ T3947] vlan2: entered allmulticast mode [ 43.801172][ T3950] netlink: 123 bytes leftover after parsing attributes in process `syz.0.102'. [ 43.805730][ T3939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.99'. [ 43.901256][ T3958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.105'. [ 43.910521][ T3958] unsupported nlmsg_type 40 [ 43.967674][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.999617][ T3963] netlink: 'syz.3.106': attribute type 32 has an invalid length. [ 44.233731][ T3995] tipc: Started in network mode [ 44.238682][ T3995] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 44.248194][ T3995] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 44.256883][ T3995] tipc: Enabled bearer , priority 10 [ 44.291424][ T3997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 44.320413][ T3998] veth2: entered promiscuous mode [ 44.325494][ T3998] veth2: entered allmulticast mode [ 44.420692][ T4002] SELinux: Context @ is not valid (left unmapped). [ 44.728838][ T4004] loop4: detected capacity change from 0 to 512 [ 44.735699][ T4004] EXT4-fs: Ignoring removed oldalloc option [ 44.744811][ T4004] EXT4-fs (loop4): 1 truncate cleaned up [ 44.750962][ T4004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.872695][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.929009][ T4013] loop4: detected capacity change from 0 to 512 [ 44.944818][ T4013] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.113: bg 0: block 248: padding at end of block bitmap is not set [ 44.959368][ T4013] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.113: Failed to acquire dquot type 1 [ 44.971252][ T4013] EXT4-fs (loop4): 1 truncate cleaned up [ 44.977304][ T4013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.989805][ T4013] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.007739][ T4013] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.113: deleted inode referenced: 12 [ 45.019913][ T4013] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.113: deleted inode referenced: 12 [ 45.105061][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.118372][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 1 [ 45.251343][ T36] IPVS: starting estimator thread 0... [ 45.257926][ T4027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 45.271687][ T36] tipc: Node number set to 1 [ 45.289421][ T4027] bond0: (slave bond2): Enslaving as an active interface with an up link [ 45.328720][ T4033] loop1: detected capacity change from 0 to 512 [ 45.362339][ T4031] IPVS: using max 2352 ests per chain, 117600 per kthread [ 45.373066][ T4033] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.116: inode has both inline data and extents flags [ 45.386734][ T4033] EXT4-fs (loop1): get root inode failed [ 45.392611][ T4033] EXT4-fs (loop1): mount failed [ 45.566948][ T4045] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 45.576280][ T4042] IPVS: stopping master sync thread 4045 ... [ 45.609749][ T4049] program syz.1.122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.694721][ T4051] loop1: detected capacity change from 0 to 512 [ 45.701753][ T4051] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.713847][ T4051] EXT4-fs (loop1): 1 truncate cleaned up [ 45.720151][ T4051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.801316][ T4053] netlink: 52 bytes leftover after parsing attributes in process `syz.1.123'. [ 45.840752][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.572689][ T4069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.128'. [ 47.090980][ T4076] loop1: detected capacity change from 0 to 1024 [ 47.092714][ T4078] netlink: 'syz.2.130': attribute type 13 has an invalid length. [ 47.149494][ T4076] loop1: detected capacity change from 0 to 2048 [ 47.171662][ T4074] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.183264][ T3784] Alternate GPT is invalid, using primary GPT. [ 47.189732][ T3784] loop1: p1 p2 p3 [ 47.193513][ T3784] loop1: partition table partially beyond EOD, truncated [ 47.215009][ T4076] Alternate GPT is invalid, using primary GPT. [ 47.221468][ T4076] loop1: p1 p2 p3 [ 47.225290][ T4076] loop1: partition table partially beyond EOD, truncated [ 47.231110][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 47.231124][ T29] audit: type=1326 audit(1762427805.241:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.261863][ T29] audit: type=1326 audit(1762427805.241:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.288568][ T29] audit: type=1326 audit(1762427805.301:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.312204][ T29] audit: type=1326 audit(1762427805.301:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.335612][ T29] audit: type=1326 audit(1762427805.301:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.360582][ T29] audit: type=1326 audit(1762427805.301:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.365190][ T4078] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.384089][ T29] audit: type=1326 audit(1762427805.301:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.391132][ T4078] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.414415][ T29] audit: type=1326 audit(1762427805.301:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.444686][ T29] audit: type=1326 audit(1762427805.301:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.468070][ T29] audit: type=1326 audit(1762427805.301:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 47.595420][ T3006] Alternate GPT is invalid, using primary GPT. [ 47.601806][ T3006] loop1: p1 p2 p3 [ 47.605576][ T3006] loop1: partition table partially beyond EOD, truncated [ 47.614549][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.667511][ T4078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.530467][ T4101] netlink: 'syz.0.134': attribute type 13 has an invalid length. [ 48.832769][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.905570][ T4106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.136'. [ 48.941023][ T4101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.123066][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.212014][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.212052][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.213157][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.213188][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.213255][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.213343][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.250912][ T4124] ref_ctr increment failed for inode: 0x94 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005e780 [ 49.295323][ T4127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.295479][ T4127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.476554][ T4139] loop1: detected capacity change from 0 to 128 [ 49.486179][ T4139] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.505876][ T4139] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.527180][ T4139] batadv0: entered promiscuous mode [ 49.532494][ T4139] batadv0: entered allmulticast mode [ 49.609213][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.724185][ T3571] IPVS: starting estimator thread 0... [ 49.809956][ T4154] loop3: detected capacity change from 0 to 512 [ 49.816341][ T4152] IPVS: using max 2592 ests per chain, 129600 per kthread [ 49.825987][ T4154] ext4: Unknown parameter 'uid' [ 49.945240][ T4164] pimreg: entered allmulticast mode [ 49.953119][ T4164] pimreg: left allmulticast mode [ 50.278442][ T4175] loop3: detected capacity change from 0 to 128 [ 50.357856][ T4180] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 50.396428][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 50.416955][ T4177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 50.440791][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.448084][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.543274][ T4186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.565015][ T31] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.577661][ T31] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.590540][ T31] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.599202][ T31] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.649847][ T4186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.726375][ T4193] loop2: detected capacity change from 0 to 512 [ 50.734535][ T4193] ext4: Bad value for 'max_batch_time' [ 50.744954][ T4186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.774557][ T4193] tipc: Started in network mode [ 50.779496][ T4193] tipc: Node identity ac14140f, cluster identity 4711 [ 50.786927][ T4193] tipc: New replicast peer: 255.255.255.255 [ 50.793018][ T4193] tipc: Enabled bearer , priority 10 [ 50.833180][ T4186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.863994][ T4197] capability: warning: `syz.0.160' uses 32-bit capabilities (legacy support in use) [ 50.867976][ T4200] xt_hashlimit: size too large, truncated to 1048576 [ 50.886724][ T4197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4197 comm=syz.0.160 [ 50.942216][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.958350][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.983686][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.009555][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.107662][ T4206] loop3: detected capacity change from 0 to 512 [ 51.115011][ T4206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.153767][ T4207] IPVS: Error connecting to the multicast addr [ 51.160129][ T4206] EXT4-fs (loop3): 1 truncate cleaned up [ 51.173013][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.206650][ T4209] xt_hashlimit: max too large, truncated to 1048576 [ 51.305781][ T4221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 51.333098][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.360909][ T4223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 51.420951][ T4225] infiniband !yz!: set down [ 51.425774][ T4225] infiniband !yz!: added team_slave_0 [ 51.432309][ T4226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.167'. [ 51.452893][ T4225] RDS/IB: !yz!: added [ 51.458311][ T4226] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 51.466119][ T4226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.167'. [ 51.475405][ T4225] smc: adding ib device !yz! with port count 1 [ 51.481677][ T4225] smc: ib device !yz! port 1 has no pnetid [ 51.495339][ T4226] batman_adv: batadv0: Adding interface: veth1_vlan [ 51.502692][ T4226] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.530245][ T4226] batman_adv: batadv0: Interface activated: veth1_vlan [ 51.808144][ T4237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.829358][ T4239] netlink: 'syz.2.171': attribute type 3 has an invalid length. [ 51.880727][ T4243] ref_ctr_offset mismatch. inode: 0xed offset: 0x0 ref_ctr_offset(old): 0x5c ref_ctr_offset(new): 0x200000000180 [ 51.922217][ T36] tipc: Node number set to 2886997007 [ 51.939181][ T4245] loop2: detected capacity change from 0 to 256 [ 51.952302][ T4245] FAT-fs (loop2): bogus sectors per cluster 223 [ 51.958654][ T4245] FAT-fs (loop2): Can't find a valid FAT filesystem [ 52.012419][ T4245] wireguard0: entered promiscuous mode [ 52.018001][ T4245] wireguard0: entered allmulticast mode [ 52.102741][ T4254] dummy0: entered allmulticast mode [ 52.129124][ T4253] ip6t_srh: unknown srh match flags 4000 [ 52.148142][ T4256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.176'. [ 52.158052][ T4254] wireguard0: entered promiscuous mode [ 52.163679][ T4254] wireguard0: entered allmulticast mode [ 52.368385][ T4267] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.378210][ T4267] netlink: 'syz.2.179': attribute type 13 has an invalid length. [ 52.453652][ T4269] netlink: 260 bytes leftover after parsing attributes in process `syz.1.178'. [ 52.477196][ T4248] dummy0: left allmulticast mode [ 52.563907][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 52.563920][ T29] audit: type=1400 audit(1762427810.581:2578): avc: denied { nlmsg_read } for pid=4268 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.733170][ T29] audit: type=1326 audit(1762427810.701:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.756848][ T29] audit: type=1326 audit(1762427810.701:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.780338][ T29] audit: type=1326 audit(1762427810.711:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.803929][ T29] audit: type=1326 audit(1762427810.711:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.827360][ T29] audit: type=1326 audit(1762427810.711:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.850711][ T29] audit: type=1326 audit(1762427810.711:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.874282][ T29] audit: type=1326 audit(1762427810.721:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.897650][ T29] audit: type=1326 audit(1762427810.721:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 52.921114][ T29] audit: type=1326 audit(1762427810.721:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 53.033183][ T4275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.346753][ T4285] loop1: detected capacity change from 0 to 2048 [ 53.367245][ T4275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.406507][ T4285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.490682][ T4275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.501195][ T4285] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.606105][ T4297] vlan2: entered allmulticast mode [ 53.623302][ T4275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.712505][ T1885] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.726436][ T31] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.740223][ T31] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.753374][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.806503][ T4306] loop2: detected capacity change from 0 to 2048 [ 53.821969][ T4308] loop4: detected capacity change from 0 to 2048 [ 53.833885][ T4306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.848311][ T4308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.874379][ T4308] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.907190][ T31] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 53.922456][ T31] EXT4-fs (loop1): Remounting filesystem read-only [ 53.929094][ T58] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 54.008758][ T4313] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.030841][ T4313] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1418 with error 28 [ 54.039839][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.043707][ T4313] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.043707][ T4313] [ 54.062505][ T4313] EXT4-fs (loop2): Total free blocks count 0 [ 54.068490][ T4313] EXT4-fs (loop2): Free/Dirty block details [ 54.074490][ T4313] EXT4-fs (loop2): free_blocks=2415919104 [ 54.080276][ T4313] EXT4-fs (loop2): dirty_blocks=1424 [ 54.085615][ T4313] EXT4-fs (loop2): Block reservation details [ 54.091613][ T4313] EXT4-fs (loop2): i_reserved_data_blocks=89 [ 54.175551][ T4318] loop1: detected capacity change from 0 to 512 [ 54.194968][ T4318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.206867][ T4318] EXT4-fs (loop1): 1 truncate cleaned up [ 54.208322][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.213975][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.264529][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.294666][ T4326] loop1: detected capacity change from 0 to 128 [ 54.306260][ T4326] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.326010][ T4326] ext4 filesystem being mounted at /46 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.359669][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.380446][ T4330] loop1: detected capacity change from 0 to 512 [ 54.388340][ T4330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.403088][ T4330] EXT4-fs (loop1): 1 truncate cleaned up [ 54.412638][ T4330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.464821][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.496602][ T4333] ref_ctr increment failed for inode: 0x12a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811e724ac0 [ 54.624759][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 54.654427][ T4338] pimreg: entered allmulticast mode [ 54.661578][ T4338] pimreg: left allmulticast mode [ 54.706911][ T4338] loop2: detected capacity change from 0 to 512 [ 54.735388][ T4343] vlan2: entered allmulticast mode [ 54.745006][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.757670][ T4338] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.789020][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.877801][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 54.897730][ T4353] vlan2: entered allmulticast mode [ 55.010097][ T4353] loop1: detected capacity change from 0 to 512 [ 55.019197][ T4353] EXT4-fs: inline encryption not supported [ 55.040001][ T4353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.061130][ T4353] EXT4-fs (loop1): 1 truncate cleaned up [ 55.067504][ T4353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.081226][ T4353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.605908][ T4355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.203'. [ 55.659944][ T4380] ip6t_srh: unknown srh match flags 4000 [ 55.806511][ T4386] loop3: detected capacity change from 0 to 256 [ 55.837890][ T4386] FAT-fs (loop3): bogus sectors per cluster 223 [ 55.846439][ T4386] FAT-fs (loop3): Can't find a valid FAT filesystem [ 55.870236][ T4393] ref_ctr increment failed for inode: 0xd4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005f8c0 [ 55.903946][ T4395] xt_hashlimit: max too large, truncated to 1048576 [ 55.943645][ T4396] dummy0: entered allmulticast mode [ 55.973053][ T4396] wireguard0: entered promiscuous mode [ 55.978556][ T4396] wireguard0: entered allmulticast mode [ 56.054707][ T4399] pimreg: entered allmulticast mode [ 56.067967][ T4399] pimreg: left allmulticast mode [ 56.078305][ T4401] lo speed is unknown, defaulting to 1000 [ 56.084199][ T4401] lo speed is unknown, defaulting to 1000 [ 56.090615][ T4401] lo speed is unknown, defaulting to 1000 [ 56.098229][ T4401] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.111064][ T4401] lo speed is unknown, defaulting to 1000 [ 56.117688][ T4401] lo speed is unknown, defaulting to 1000 [ 56.122113][ T4402] loop4: detected capacity change from 0 to 512 [ 56.124200][ T4401] lo speed is unknown, defaulting to 1000 [ 56.136153][ T4385] dummy0: left allmulticast mode [ 56.150864][ T4402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.151157][ T4401] lo speed is unknown, defaulting to 1000 [ 56.169704][ T4401] lo speed is unknown, defaulting to 1000 [ 56.176424][ T4402] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.213130][ T4407] loop3: detected capacity change from 0 to 128 [ 56.213136][ T4401] loop9: detected capacity change from 0 to 7 [ 56.213722][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.221495][ T4407] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.245667][ T4407] ext4 filesystem being mounted at /39 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.265964][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.272176][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.282794][ T3784] loop9: unable to read partition table [ 56.289446][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.297391][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.306142][ T4401] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.314156][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.322279][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.330179][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.341131][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.351741][ T4401] Buffer I/O error on dev loop9, logical block 0, async page read [ 56.359659][ T4401] loop9: unable to read partition table [ 56.377387][ T4401] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 56.377387][ T4401] ) failed (rc=-5) [ 56.480653][ T4415] loop4: detected capacity change from 0 to 512 [ 56.492688][ T4414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.536760][ T4401] lo speed is unknown, defaulting to 1000 [ 56.649129][ T4415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.681627][ T4415] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.962582][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.975511][ T4431] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 56.984766][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.220'. [ 56.994750][ T4431] netlink: 'syz.2.220': attribute type 10 has an invalid length. [ 57.002506][ T4431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.220'. [ 57.017369][ T4431] veth1_vlan: left promiscuous mode [ 57.024823][ T4431] batman_adv: batadv0: Adding interface: veth1_vlan [ 57.031708][ T4431] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.057673][ T4431] batman_adv: batadv0: Interface activated: veth1_vlan [ 57.071020][ T4437] ip6t_srh: unknown srh match flags 4000 [ 57.384414][ T4445] loop1: detected capacity change from 0 to 128 [ 57.411262][ T4445] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.431431][ T4445] ext4 filesystem being mounted at /56 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.618781][ T4437] Set syz1 is full, maxelem 65536 reached [ 57.624869][ T29] kauditd_printk_skb: 760 callbacks suppressed [ 57.624881][ T29] audit: type=1326 audit(1762427815.641:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 57.654952][ T29] audit: type=1326 audit(1762427815.641:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 57.679392][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.705693][ T29] audit: type=1326 audit(1762427815.711:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 57.729196][ T29] audit: type=1326 audit(1762427815.711:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 57.752670][ T29] audit: type=1326 audit(1762427815.711:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 57.776327][ T29] audit: type=1326 audit(1762427815.711:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 57.799930][ T29] audit: type=1326 audit(1762427815.711:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 57.823477][ T29] audit: type=1326 audit(1762427815.711:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 57.847057][ T29] audit: type=1326 audit(1762427815.711:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9bba2ff703 code=0x7ffc0000 [ 57.870293][ T29] audit: type=1326 audit(1762427815.711:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9bba2ff703 code=0x7ffc0000 [ 57.916542][ T4457] pimreg: entered allmulticast mode [ 57.923662][ T4457] pimreg: left allmulticast mode [ 57.983419][ T4459] loop1: detected capacity change from 0 to 512 [ 58.004018][ T4459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.017198][ T4459] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.064094][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.120466][ T4465] loop2: detected capacity change from 0 to 512 [ 58.130121][ T4465] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.226806][ T4468] lo speed is unknown, defaulting to 1000 [ 58.323201][ T4465] EXT4-fs (loop2): 1 truncate cleaned up [ 58.362777][ T4465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.388045][ T4473] siw: device registration error -23 [ 58.422608][ T4473] loop9: detected capacity change from 0 to 7 [ 58.453072][ T3784] Buffer I/O error on dev loop9, logical block 0, async page read [ 58.487126][ T3784] loop9: unable to read partition table [ 58.948536][ T4474] lo speed is unknown, defaulting to 1000 [ 58.957543][ T4473] loop9: unable to read partition table [ 58.963317][ T4473] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 58.963317][ T4473] ) failed (rc=-5) [ 58.992505][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.290984][ T4493] siw: device registration error -23 [ 59.330378][ T4490] tipc: Started in network mode [ 59.333431][ T4493] loop9: detected capacity change from 0 to 7 [ 59.335343][ T4490] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 59.350437][ T4490] tipc: Enabling of bearer rejected, failed to enable media [ 59.352512][ T4493] loop9: unable to read partition table [ 59.387445][ T4493] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 59.387445][ T4493] ) failed (rc=-5) [ 59.423197][ T4494] loop3: detected capacity change from 0 to 512 [ 59.453342][ T4495] veth2: entered promiscuous mode [ 59.458503][ T4495] veth2: entered allmulticast mode [ 59.486854][ T4494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.541384][ T4494] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.714171][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.722485][ T4493] lo speed is unknown, defaulting to 1000 [ 59.771157][ T4506] loop3: detected capacity change from 0 to 256 [ 59.781668][ T4506] FAT-fs (loop3): bogus sectors per cluster 223 [ 59.788038][ T4506] FAT-fs (loop3): Can't find a valid FAT filesystem [ 59.848833][ T4506] wireguard0: entered promiscuous mode [ 59.854493][ T4506] wireguard0: entered allmulticast mode [ 59.935969][ T4510] loop4: detected capacity change from 0 to 128 [ 59.957209][ T4510] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.975874][ T4516] loop1: detected capacity change from 0 to 512 [ 60.005107][ T4510] ext4 filesystem being mounted at /41 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.033724][ T4516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.061094][ T4516] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.079686][ T4521] loop3: detected capacity change from 0 to 1024 [ 60.142362][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.180220][ T4521] loop3: detected capacity change from 0 to 2048 [ 60.212489][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.224732][ T3784] Alternate GPT is invalid, using primary GPT. [ 60.231034][ T3784] loop3: p1 p2 p3 [ 60.234816][ T3784] loop3: partition table partially beyond EOD, truncated [ 60.256000][ T4534] loop2: detected capacity change from 0 to 512 [ 60.265984][ T4534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.278246][ T4534] EXT4-fs (loop2): 1 truncate cleaned up [ 60.283305][ T4521] Alternate GPT is invalid, using primary GPT. [ 60.290246][ T4521] loop3: p1 p2 p3 [ 60.290633][ T4534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.294031][ T4521] loop3: partition table partially beyond EOD, truncated [ 60.338553][ T3006] Alternate GPT is invalid, using primary GPT. [ 60.344972][ T3006] loop3: p1 p2 p3 [ 60.348745][ T3006] loop3: partition table partially beyond EOD, truncated [ 60.522496][ T4546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 60.600907][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.695564][ T4563] ref_ctr increment failed for inode: 0x10e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005f8c0 [ 61.876611][ T4569] loop4: detected capacity change from 0 to 256 [ 61.883849][ T4569] FAT-fs (loop4): bogus sectors per cluster 223 [ 61.890105][ T4569] FAT-fs (loop4): Can't find a valid FAT filesystem [ 61.904876][ T4570] netlink: 56 bytes leftover after parsing attributes in process `syz.1.254'. [ 61.922199][ T4570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 61.957038][ T4569] wireguard0: entered promiscuous mode [ 61.962607][ T4569] wireguard0: entered allmulticast mode [ 62.599559][ T4574] loop1: detected capacity change from 0 to 256 [ 62.650036][ T4580] loop2: detected capacity change from 0 to 512 [ 62.658117][ T4574] FAT-fs (loop1): bogus sectors per cluster 223 [ 62.664975][ T4574] FAT-fs (loop1): Can't find a valid FAT filesystem [ 62.785986][ T4580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.833968][ T4587] dummy0: entered allmulticast mode [ 62.842609][ T4580] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.904332][ T4587] wireguard0: entered promiscuous mode [ 62.909899][ T4587] wireguard0: entered allmulticast mode [ 63.001108][ T4591] loop4: detected capacity change from 0 to 128 [ 63.026013][ T4591] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.038819][ T4591] ext4 filesystem being mounted at /47 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.081507][ T4573] dummy0: left allmulticast mode [ 63.173719][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.197717][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 63.218490][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 63.235890][ T4598] loop1: detected capacity change from 0 to 128 [ 63.247306][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.248313][ T4598] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.274185][ T4598] ext4 filesystem being mounted at /64 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.337275][ T4603] netlink: 123 bytes leftover after parsing attributes in process `syz.2.264'. [ 63.354172][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 63.354187][ T29] audit: type=1400 audit(1762427821.371:3791): avc: denied { bind } for pid=4602 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 63.374992][ T4600] program syz.4.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.395799][ T29] audit: type=1400 audit(1762427821.411:3792): avc: denied { remount } for pid=4602 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.427645][ T4609] program syz.4.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.438144][ T4609] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 63.463094][ T3319] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.470701][ T29] audit: type=1400 audit(1762427821.481:3793): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 63.492488][ T4605] loop3: detected capacity change from 0 to 2048 [ 63.495925][ T4608] netlink: 'syz.0.265': attribute type 13 has an invalid length. [ 63.517735][ T4605] EXT4-fs: Ignoring removed bh option [ 63.536066][ T4608] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.543345][ T4608] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.543703][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.573979][ T29] audit: type=1400 audit(1762427821.591:3794): avc: denied { ioctl } for pid=4604 comm="syz.3.263" path="/48/file1/file1" dev="loop3" ino=15 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.589442][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.608872][ T4608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.624282][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.643544][ T4615] netlink: 123 bytes leftover after parsing attributes in process `syz.1.278'. [ 63.699970][ T4620] loop4: detected capacity change from 0 to 2048 [ 63.816657][ T4620] Alternate GPT is invalid, using primary GPT. [ 63.823243][ T4620] loop4: p1 p2 p3 [ 63.826961][ T4620] loop4: partition table partially beyond EOD, truncated [ 63.849040][ T1885] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.927888][ T29] audit: type=1400 audit(1762427821.921:3795): avc: denied { ioctl } for pid=4616 comm="syz.2.269" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.094682][ T4628] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.110420][ T1885] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.120741][ T1885] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.130102][ T1885] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.191938][ T4628] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.225992][ T29] audit: type=1326 audit(1762427822.161:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b395f6c9 code=0x7ffc0000 [ 64.249362][ T29] audit: type=1326 audit(1762427822.161:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b395f6c9 code=0x7ffc0000 [ 64.272710][ T29] audit: type=1326 audit(1762427822.171:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b395f6c9 code=0x7ffc0000 [ 64.296005][ T29] audit: type=1326 audit(1762427822.171:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b395f6c9 code=0x7ffc0000 [ 64.319398][ T29] audit: type=1326 audit(1762427822.171:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.1.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b395f6c9 code=0x7ffc0000 [ 64.793526][ T4636] loop4: detected capacity change from 0 to 8192 [ 64.813513][ T4628] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.852895][ T4636] loop4: p1 < > p2 < > p3 p4 < > [ 64.857966][ T4636] loop4: partition table partially beyond EOD, truncated [ 64.867005][ T4636] loop4: p1 start 67108864 is beyond EOD, truncated [ 64.867220][ T4628] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.884663][ T4636] loop4: p3 start 100859904 is beyond EOD, truncated [ 64.893718][ T4641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.272'. [ 64.898964][ T3802] udevd[3802]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 64.910106][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.940957][ T374] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.952402][ T374] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.967667][ T374] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975968][ T374] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.011046][ T4646] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 65.057915][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 65.070076][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 65.109462][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 65.120445][ T4658] loop1: detected capacity change from 0 to 512 [ 65.120935][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 65.169317][ T4656] loop4: detected capacity change from 0 to 2048 [ 65.180279][ T4658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.260864][ T4656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 65.276369][ T4658] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.292337][ T4667] xt_hashlimit: max too large, truncated to 1048576 [ 65.464197][ T4670] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.488368][ T4670] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1114 with error 28 [ 65.500936][ T4670] EXT4-fs (loop4): This should not happen!! Data will be lost [ 65.500936][ T4670] [ 65.510628][ T4670] EXT4-fs (loop4): Total free blocks count 0 [ 65.516771][ T4670] EXT4-fs (loop4): Free/Dirty block details [ 65.522682][ T4670] EXT4-fs (loop4): free_blocks=2415919104 [ 65.528392][ T4670] EXT4-fs (loop4): dirty_blocks=1120 [ 65.533753][ T4670] EXT4-fs (loop4): Block reservation details [ 65.539748][ T4670] EXT4-fs (loop4): i_reserved_data_blocks=70 [ 65.924518][ T4674] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 65.992905][ T4687] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.002921][ T4687] rdma_rxe: rxe_newlink: failed to add bond0 [ 66.188497][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 66.226630][ T4691] loop1: detected capacity change from 0 to 2048 [ 66.273236][ T3784] Alternate GPT is invalid, using primary GPT. [ 66.279707][ T3784] loop1: p1 p2 p3 [ 66.283482][ T3784] loop1: partition table partially beyond EOD, truncated [ 66.301418][ T4691] Alternate GPT is invalid, using primary GPT. [ 66.307774][ T4691] loop1: p1 p2 p3 [ 66.311503][ T4691] loop1: partition table partially beyond EOD, truncated [ 66.410848][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 66.421251][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.434740][ T3802] udevd[3802]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 66.462827][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 66.465524][ T4699] loop4: detected capacity change from 0 to 512 [ 66.535016][ T4699] EXT4-fs mount: 2 callbacks suppressed [ 66.535034][ T4699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.553901][ T4699] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.585587][ T4699] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 66.632658][ T4707] netlink: 14 bytes leftover after parsing attributes in process `syz.2.291'. [ 66.765844][ T4714] pimreg: entered allmulticast mode [ 66.781102][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.791009][ T4714] pimreg: left allmulticast mode [ 66.830408][ T4717] program syz.4.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.864425][ T4717] loop4: detected capacity change from 0 to 1024 [ 66.901516][ T4717] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.912566][ T4717] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.922025][ T4712] x_tables: unsorted underflow at hook 3 [ 66.933784][ T4717] JBD2: no valid journal superblock found [ 66.939625][ T4717] EXT4-fs (loop4): Could not load journal inode [ 66.953288][ T374] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.972212][ T374] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.000517][ T1885] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.013141][ T1885] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.051619][ T4730] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 67.059446][ T4730] netlink: 224 bytes leftover after parsing attributes in process `syz.1.295'. [ 67.353390][ T4738] netlink: 260 bytes leftover after parsing attributes in process `syz.3.298'. [ 68.271360][ T4747] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 68.458524][ T4752] loop3: detected capacity change from 0 to 2048 [ 68.515977][ T3784] Alternate GPT is invalid, using primary GPT. [ 68.522399][ T3784] loop3: p1 p2 p3 [ 68.526141][ T3784] loop3: partition table partially beyond EOD, truncated [ 68.548071][ T4755] geneve2: entered promiscuous mode [ 68.585856][ T4757] netlink: 'syz.0.303': attribute type 4 has an invalid length. [ 68.593636][ T4757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.303'. [ 68.605370][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 68.605382][ T29] audit: type=1400 audit(1762427826.621:4151): avc: denied { create } for pid=4754 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.631242][ T3493] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.657125][ T4704] loop2: detected capacity change from 0 to 2048 [ 68.676905][ T3493] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.707358][ T3493] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.731709][ T4757] .`: renamed from bond0 [ 68.740766][ T29] audit: type=1400 audit(1762427826.671:4152): avc: denied { setopt } for pid=4754 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.779365][ T4752] Alternate GPT is invalid, using primary GPT. [ 68.785892][ T4752] loop3: p1 p2 p3 [ 68.789727][ T4752] loop3: partition table partially beyond EOD, truncated [ 68.803050][ T4704] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.291: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 68.826515][ T4757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 68.831755][ T4704] EXT4-fs (loop2): get root inode failed [ 68.841161][ T4704] EXT4-fs (loop2): mount failed [ 68.843924][ T4764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 68.862271][ T3493] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.956226][ T29] audit: type=1326 audit(1762427826.961:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x0 [ 69.063268][ T4771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.074408][ T4767] loop3: detected capacity change from 0 to 8192 [ 69.112606][ T3784] loop3: p1 < > p2 < > p3 p4 < > [ 69.117661][ T3784] loop3: partition table partially beyond EOD, truncated [ 69.130549][ T3784] loop3: p1 start 67108864 is beyond EOD, truncated [ 69.139761][ T4771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.150651][ T3784] loop3: p3 start 100859904 is beyond EOD, truncated [ 69.174923][ T4767] loop3: p1 < > p2 < > p3 p4 < > [ 69.179988][ T4767] loop3: partition table partially beyond EOD, truncated [ 69.190380][ T29] audit: type=1326 audit(1762427827.211:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.3.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b2250f6c9 code=0x0 [ 69.209825][ T4767] loop3: p1 start 67108864 is beyond EOD, truncated [ 69.222359][ T4767] loop3: p3 start 100859904 is beyond EOD, truncated [ 69.234630][ T4771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.284596][ T4771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.339993][ T4767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 69.349082][ T4778] loop1: detected capacity change from 0 to 2048 [ 69.360294][ T374] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.376513][ T374] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.385962][ T374] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.402201][ T374] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.412176][ T4778] Alternate GPT is invalid, using primary GPT. [ 69.418597][ T4778] loop1: p2 p3 p7 [ 69.472290][ T29] audit: type=1400 audit(1762427827.481:4155): avc: denied { execute } for pid=4777 comm="syz.1.308" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 69.556312][ T29] audit: type=1326 audit(1762427827.561:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 69.561191][ T374] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.579946][ T29] audit: type=1326 audit(1762427827.561:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 69.590042][ T374] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.611625][ T29] audit: type=1326 audit(1762427827.561:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 69.643101][ T29] audit: type=1326 audit(1762427827.561:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 69.647866][ T374] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.666468][ T29] audit: type=1326 audit(1762427827.561:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9bba2ff6c9 code=0x7ffc0000 [ 69.675145][ T374] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.891535][ T4793] loop4: detected capacity change from 0 to 128 [ 69.943531][ T4793] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.956151][ T4793] ext4 filesystem being mounted at /62 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.989688][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.184678][ T4800] lo speed is unknown, defaulting to 1000 [ 70.305313][ T4800] loop3: detected capacity change from 0 to 128 [ 70.313962][ T4800] FAT-fs (loop3): Directory bread(block 414) failed [ 70.320576][ T4800] FAT-fs (loop3): Directory bread(block 415) failed [ 70.327206][ T4800] FAT-fs (loop3): Directory bread(block 416) failed [ 70.333843][ T4800] FAT-fs (loop3): Directory bread(block 417) failed [ 70.340468][ T4800] FAT-fs (loop3): Directory bread(block 418) failed [ 70.347089][ T4800] FAT-fs (loop3): Directory bread(block 419) failed [ 70.353708][ T4800] FAT-fs (loop3): Directory bread(block 420) failed [ 70.360321][ T4800] FAT-fs (loop3): Directory bread(block 421) failed [ 70.383643][ T4800] FAT-fs (loop3): FAT read failed (blocknr 128) [ 70.966237][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 71.018315][ T4810] loop4: detected capacity change from 0 to 2048 [ 71.042671][ T4815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 71.064056][ T3784] Alternate GPT is invalid, using primary GPT. [ 71.070366][ T3784] loop4: p1 p2 p3 [ 71.074240][ T3784] loop4: partition table partially beyond EOD, truncated [ 71.091260][ T4810] Alternate GPT is invalid, using primary GPT. [ 71.097669][ T4810] loop4: p1 p2 p3 [ 71.101433][ T4810] loop4: partition table partially beyond EOD, truncated [ 71.199282][ T3006] Alternate GPT is invalid, using primary GPT. [ 71.205628][ T3006] loop4: p1 p2 p3 [ 71.209360][ T3006] loop4: partition table partially beyond EOD, truncated [ 71.401639][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.446004][ T3802] udevd[3802]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 71.478019][ T4826] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.509913][ T3784] udevd[3784]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 71.521176][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 71.554553][ T4826] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.636761][ T4826] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.714557][ T4826] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.739849][ T4831] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.769109][ T4831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 71.826510][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.844895][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.879944][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.929805][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.060019][ T4834] atomic_op ffff8881190b1128 conn xmit_atomic 0000000000000000 [ 72.225411][ T4845] loop1: detected capacity change from 0 to 512 [ 72.358663][ T4845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.429614][ T4845] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.482829][ T4849] loop2: detected capacity change from 0 to 512 [ 72.505405][ T4849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.554640][ T4849] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.562633][ T4849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 72.582591][ T4849] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.588699][ T4849] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.618719][ T4849] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.633318][ T4849] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 72.666874][ T4849] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.326: bg 0: block 40: padding at end of block bitmap is not set [ 72.681595][ T4849] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 72.690724][ T4849] EXT4-fs (loop2): 1 truncate cleaned up [ 72.709550][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.729477][ T4854] loop3: detected capacity change from 0 to 32768 [ 72.737093][ T4849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.754352][ T4849] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.326: bad symlink. [ 72.765270][ T3571] IPVS: starting estimator thread 0... [ 72.782923][ T3784] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 72.788217][ T3784] loop3: p1 start 460800 is beyond EOD, truncated [ 72.794768][ T3784] loop3: p2 size 83886080 extends beyond EOD, truncated [ 72.805473][ T3784] loop3: p5 start 460800 is beyond EOD, truncated [ 72.811940][ T3784] loop3: p6 size 83886080 extends beyond EOD, truncated [ 72.827437][ T4867] lo speed is unknown, defaulting to 1000 [ 72.833618][ T4854] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 72.838952][ T4854] loop3: p1 start 460800 is beyond EOD, truncated [ 72.845421][ T4854] loop3: p2 size 83886080 extends beyond EOD, truncated [ 72.855071][ T4854] loop3: p5 start 460800 is beyond EOD, truncated [ 72.861604][ T4854] loop3: p6 size 83886080 extends beyond EOD, truncated [ 72.872137][ T4865] IPVS: using max 2208 ests per chain, 110400 per kthread [ 72.913759][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.296841][ T4877] lo speed is unknown, defaulting to 1000 [ 73.424056][ T4877] loop2: detected capacity change from 0 to 128 [ 73.432750][ T4877] FAT-fs (loop2): Directory bread(block 414) failed [ 73.439387][ T4877] FAT-fs (loop2): Directory bread(block 415) failed [ 73.446027][ T4877] FAT-fs (loop2): Directory bread(block 416) failed [ 73.452698][ T4877] FAT-fs (loop2): Directory bread(block 417) failed [ 73.459369][ T4877] FAT-fs (loop2): Directory bread(block 418) failed [ 73.465986][ T4877] FAT-fs (loop2): Directory bread(block 419) failed [ 73.472737][ T4877] FAT-fs (loop2): Directory bread(block 420) failed [ 73.479366][ T4877] FAT-fs (loop2): Directory bread(block 421) failed [ 73.503087][ T4877] FAT-fs (loop2): FAT read failed (blocknr 128) [ 73.762127][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 73.762144][ T29] audit: type=1326 audit(1762427831.751:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2250f6c9 code=0x7ffc0000 [ 73.791704][ T29] audit: type=1326 audit(1762427831.751:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4846 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2250f6c9 code=0x7ffc0000 [ 74.112570][ T29] audit: type=1400 audit(1762427832.131:4358): avc: denied { mount } for pid=4879 comm="syz.0.335" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 74.165236][ T29] audit: type=1400 audit(1762427832.171:4359): avc: denied { read } for pid=4883 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.241499][ T29] audit: type=1326 audit(1762427832.251:4360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 74.268438][ T29] audit: type=1326 audit(1762427832.281:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 74.312763][ T29] audit: type=1326 audit(1762427832.321:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 74.336311][ T29] audit: type=1326 audit(1762427832.321:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 74.359971][ T29] audit: type=1326 audit(1762427832.321:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 74.383479][ T29] audit: type=1326 audit(1762427832.321:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 74.548620][ T4907] loop4: detected capacity change from 0 to 256 [ 74.562180][ T4907] FAT-fs (loop4): bogus sectors per cluster 223 [ 74.568621][ T4907] FAT-fs (loop4): Can't find a valid FAT filesystem [ 74.639288][ T4911] dummy0: entered allmulticast mode [ 74.845053][ T4911] wireguard0: entered promiscuous mode [ 74.850561][ T4911] wireguard0: entered allmulticast mode [ 75.001618][ T4906] dummy0: left allmulticast mode [ 75.286781][ T4927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.344'. [ 75.381177][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 75.432329][ T4929] batadv1: left allmulticast mode [ 75.437424][ T4929] batadv1: left promiscuous mode [ 75.442595][ T4929] bridge0: port 3(batadv1) entered disabled state [ 75.507674][ T4929] bridge_slave_1: left allmulticast mode [ 75.513443][ T4929] bridge_slave_1: left promiscuous mode [ 75.519123][ T4929] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.711093][ T4929] bridge_slave_0: left promiscuous mode [ 75.716791][ T4929] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.146898][ T4948] atomic_op ffff88815eaccd28 conn xmit_atomic 0000000000000000 [ 76.330040][ T4955] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 76.337793][ T4955] netlink: 152 bytes leftover after parsing attributes in process `syz.2.355'. [ 76.342665][ T4953] loop4: detected capacity change from 0 to 512 [ 76.348307][ T4955] .`: renamed from bond0 [ 76.366905][ T4955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.355'. [ 76.383056][ T4953] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=,fsuuid=2e07,errors=continue) failed with errno=-22 [ 76.441884][ T4953] loop4: detected capacity change from 0 to 128 [ 76.489280][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 76.514510][ T4953] syz.4.354: attempt to access beyond end of device [ 76.514510][ T4953] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 76.542756][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 76.561294][ T4932] lo speed is unknown, defaulting to 1000 [ 76.574865][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 76.671106][ T4967] netlink: 60 bytes leftover after parsing attributes in process `syz.1.358'. [ 76.753948][ T4953] syz.4.354: attempt to access beyond end of device [ 76.753948][ T4953] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 77.648356][ T4990] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.668623][ T4990] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 77.680970][ T4997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 77.863879][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.377'. [ 77.880279][ T5005] netlink: 'syz.0.377': attribute type 12 has an invalid length. [ 77.943793][ T5011] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.966897][ T5009] loop2: detected capacity change from 0 to 732 [ 77.983139][ T5009] iso9660: Unknown parameter '18446744073709551615' [ 78.016732][ T5009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.380'. [ 78.084565][ T5011] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.186639][ T5011] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.193363][ T5017] syz.2.380 uses obsolete (PF_INET,SOCK_PACKET) [ 78.323244][ T5011] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.415529][ T5024] netlink: 'syz.1.369': attribute type 4 has an invalid length. [ 78.423352][ T5024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.369'. [ 78.471713][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.498002][ T5025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 78.536988][ T5024] .`: renamed from bond0 [ 78.562192][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.596059][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.646237][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.088590][ T5034] bridge0: port 3(batadv1) entered blocking state [ 79.095215][ T5034] bridge0: port 3(batadv1) entered disabled state [ 79.111956][ T5034] batadv1: entered allmulticast mode [ 79.123029][ T5034] batadv1: entered promiscuous mode [ 79.147971][ T5036] loop2: detected capacity change from 0 to 128 [ 79.154431][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 79.154460][ T29] audit: type=1326 audit(1762427836.221:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.184029][ T29] audit: type=1326 audit(1762427836.221:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 79.207373][ T29] audit: type=1326 audit(1762427836.221:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.230758][ T29] audit: type=1326 audit(1762427836.221:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.242563][ T5036] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 79.254234][ T29] audit: type=1326 audit(1762427836.221:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.286586][ T29] audit: type=1326 audit(1762427836.221:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.309915][ T29] audit: type=1326 audit(1762427836.221:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.333312][ T29] audit: type=1326 audit(1762427836.221:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f4d307bf6c9 code=0x7ffc0000 [ 79.356640][ T29] audit: type=1326 audit(1762427836.221:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.380232][ T29] audit: type=1326 audit(1762427836.221:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d307f1f85 code=0x7ffc0000 [ 79.565209][ T5045] loop3: detected capacity change from 0 to 128 [ 79.595692][ T1885] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 79.605057][ T1885] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 79.663246][ T5045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.675619][ T5049] program syz.4.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.706953][ T5045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.731141][ T5052] tipc: Enabled bearer , priority 0 [ 79.746359][ T5052] tipc: Disabling bearer [ 79.803689][ T5045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.838898][ T5053] netlink: 'syz.0.371': attribute type 21 has an invalid length. [ 79.849882][ T5053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.371'. [ 79.858862][ T5053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 79.874252][ T5045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.985781][ T3493] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.024868][ T3493] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.033142][ T3493] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.041343][ T3493] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.065784][ T5060] netlink: 56 bytes leftover after parsing attributes in process `syz.4.393'. [ 80.082497][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 80.174281][ T5070] loop2: detected capacity change from 0 to 128 [ 80.200043][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 80.211925][ T5074] program syz.3.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.233482][ T5070] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.261633][ T5070] ext4 filesystem being mounted at /65 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.277490][ T5067] program syz.3.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.303158][ T5067] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 80.341585][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.409249][ T5083] loop2: detected capacity change from 0 to 128 [ 80.432476][ T5083] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.445220][ T5083] ext4 filesystem being mounted at /66 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.481543][ T5090] smc: net device bond0 applied user defined pnetid SYZ0 [ 80.491224][ T5089] netlink: 'syz.1.389': attribute type 39 has an invalid length. [ 80.498540][ T5090] smc: net device bond0 erased user defined pnetid SYZ0 [ 80.511137][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.560441][ T5092] loop3: detected capacity change from 0 to 128 [ 80.573662][ T5095] sctp: [Deprecated]: syz.2.390 (pid 5095) Use of int in maxseg socket option. [ 80.573662][ T5095] Use struct sctp_assoc_value instead [ 80.605004][ T5092] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.632567][ T5095] loop2: detected capacity change from 0 to 1024 [ 80.649280][ T5092] ext4 filesystem being mounted at /68 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.673263][ T5095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.713510][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.761889][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.834070][ T5104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.921076][ T5106] loop3: detected capacity change from 0 to 1024 [ 80.931317][ T5106] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.949551][ T5106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.981009][ T5112] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.010412][ T5106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.034707][ T5114] tipc: Enabling of bearer rejected, failed to enable media [ 81.057412][ T5112] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.265046][ T5112] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.304261][ T5106] netlink: 'syz.3.394': attribute type 21 has an invalid length. [ 81.324063][ T5112] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.346077][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.394630][ T5117] loop3: detected capacity change from 0 to 2048 [ 81.409712][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.423729][ T5117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.450767][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.492189][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.531403][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.544756][ T5117] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #12: comm syz.3.397: corrupted in-inode xattr: e_name out of bounds [ 81.558979][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.897103][ T5132] netlink: 'syz.1.402': attribute type 12 has an invalid length. [ 82.406636][ T5140] lo speed is unknown, defaulting to 1000 [ 82.713070][ T5156] IPVS: Error connecting to the multicast addr [ 82.779769][ T5156] 8021q: adding VLAN 0 to HW filter on device .` [ 82.787843][ T5156] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.813197][ T5156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.355457][ T5163] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.365428][ T5163] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.390791][ T5166] loop4: detected capacity change from 0 to 512 [ 83.399892][ T5166] EXT4-fs (loop4): orphan cleanup on readonly fs [ 83.408026][ T5166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.412: bg 0: block 248: padding at end of block bitmap is not set [ 83.422939][ T5166] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.412: Failed to acquire dquot type 1 [ 83.423230][ T5163] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.434981][ T5166] EXT4-fs (loop4): 1 truncate cleaned up [ 83.443838][ T5163] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.450073][ T5166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.480036][ T5166] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 83.491228][ T5169] tipc: Enabling of bearer rejected, failed to enable media [ 83.503741][ T5166] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 83.512350][ T5166] ext4 filesystem being remounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.529568][ T5163] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.539374][ T5163] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.582436][ T3694] Bluetooth: hci0: command 0x1003 tx timeout [ 83.589440][ T5163] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.590519][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.599201][ T5163] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.642424][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.685820][ T5178] program syz.3.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.690673][ T3493] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.703304][ T3493] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.724596][ T5181] pimreg: entered allmulticast mode [ 83.731197][ T5180] pimreg: left allmulticast mode [ 83.738886][ T3493] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.747182][ T3493] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.759449][ T3493] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.767793][ T3493] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.777051][ T3493] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.785304][ T3493] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.812563][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.848818][ T5189] loop4: detected capacity change from 0 to 512 [ 83.858530][ T5189] EXT4-fs: Ignoring removed i_version option [ 83.864703][ T5189] EXT4-fs: Ignoring removed bh option [ 83.879854][ T5187] loop2: detected capacity change from 0 to 512 [ 83.914051][ T5189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.940644][ T5187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.953622][ T5189] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.993215][ T5187] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.086200][ T5205] __nla_validate_parse: 8 callbacks suppressed [ 84.086217][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 84.101390][ T5196] loop3: detected capacity change from 0 to 512 [ 84.112907][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.140068][ T5196] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.417: error while reading EA inode 32 err=-116 [ 84.175072][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 84.175085][ T29] audit: type=1326 audit(1762427842.191:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b22506567 code=0x7ffc0000 [ 84.175426][ T5196] EXT4-fs (loop3): Remounting filesystem read-only [ 84.181312][ T29] audit: type=1326 audit(1762427842.191:5812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b224ab779 code=0x7ffc0000 [ 84.211022][ T29] audit: type=1326 audit(1762427842.191:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b2250f6c9 code=0x7ffc0000 [ 84.214299][ T5196] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 84.267699][ T29] audit: type=1326 audit(1762427842.251:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b22506567 code=0x7ffc0000 [ 84.275705][ T5196] EXT4-fs (loop3): 1 orphan inode deleted [ 84.290998][ T29] audit: type=1326 audit(1762427842.251:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b224ab779 code=0x7ffc0000 [ 84.297787][ T5196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.319874][ T29] audit: type=1326 audit(1762427842.251:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b2250f6c9 code=0x7ffc0000 [ 84.355216][ T29] audit: type=1326 audit(1762427842.281:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b22506567 code=0x7ffc0000 [ 84.378746][ T29] audit: type=1326 audit(1762427842.281:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b224ab779 code=0x7ffc0000 [ 84.402045][ T29] audit: type=1326 audit(1762427842.281:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7b2250f6c9 code=0x7ffc0000 [ 84.403095][ T5196] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.425322][ T29] audit: type=1326 audit(1762427842.281:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b22506567 code=0x7ffc0000 [ 84.460139][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.713617][ T5215] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.737307][ T5212] loop4: detected capacity change from 0 to 512 [ 84.762616][ T5216] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'. [ 84.776532][ T5212] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.806097][ T5215] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.829841][ T5212] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.422: bad orphan inode 13 [ 84.846006][ T5212] ext4_test_bit(bit=12, block=18) = 1 [ 84.851406][ T5212] is_bad_inode(inode)=0 [ 84.855734][ T5212] NEXT_ORPHAN(inode)=2130706432 [ 84.860587][ T5212] max_ino=32 [ 84.863891][ T5212] i_nlink=1 [ 84.867820][ T5212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.884171][ T5212] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 84.906659][ T5220] lo speed is unknown, defaulting to 1000 [ 84.914391][ T5212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.422: bg 0: block 248: padding at end of block bitmap is not set [ 84.928747][ T5215] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.956736][ T5227] loop2: detected capacity change from 0 to 2048 [ 84.979837][ T5212] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.422: Failed to acquire dquot type 1 [ 84.999464][ T5227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.052454][ T5215] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.062513][ T5212] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.089652][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.108304][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 85.117333][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.4.422'. [ 85.137007][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.161719][ T5227] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #12: comm syz.2.426: corrupted in-inode xattr: e_name out of bounds [ 85.182196][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202655][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.211986][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.240300][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.403140][ T5245] lo speed is unknown, defaulting to 1000 [ 85.475820][ T5247] loop4: detected capacity change from 0 to 2048 [ 85.554642][ T5247] Alternate GPT is invalid, using primary GPT. [ 85.560975][ T5247] loop4: p1 p2 p3 [ 85.564844][ T5247] loop4: partition table partially beyond EOD, truncated [ 85.573838][ T5242] loop3: detected capacity change from 0 to 8192 [ 85.794299][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 85.912574][ T5245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 86.286138][ T5266] infiniband syz0: set down [ 86.290674][ T5266] infiniband syz0: added bond_slave_0 [ 86.304629][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 86.326166][ T5266] RDS/IB: syz0: added [ 86.330482][ T5266] smc: adding ib device syz0 with port count 1 [ 86.337345][ T5266] smc: ib device syz0 port 1 has no pnetid [ 86.524089][ T5271] loop4: detected capacity change from 0 to 1024 [ 86.533120][ T5271] EXT4-fs: Ignoring removed orlov option [ 86.541022][ T5271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.673466][ T5274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.688983][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 86.797543][ T5276] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 86.813579][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 86.822460][ T5276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.437'. [ 86.853473][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.010939][ T5284] lo speed is unknown, defaulting to 1000 [ 87.027762][ T5286] team0: Port device team_slave_1 removed [ 87.069381][ T5287] lo speed is unknown, defaulting to 1000 [ 87.091987][ T5288] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.102104][ T3694] Bluetooth: hci0: command 0x1003 tx timeout [ 87.108204][ T3590] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.125259][ T5287] lo speed is unknown, defaulting to 1000 [ 87.134975][ T5287] lo speed is unknown, defaulting to 1000 [ 87.143103][ T5287] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 87.157288][ T5288] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.179554][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.192857][ T5287] lo speed is unknown, defaulting to 1000 [ 87.199160][ T5287] lo speed is unknown, defaulting to 1000 [ 87.206117][ T5287] lo speed is unknown, defaulting to 1000 [ 87.212335][ T5287] lo speed is unknown, defaulting to 1000 [ 87.218585][ T5287] lo speed is unknown, defaulting to 1000 [ 87.224807][ T5287] lo speed is unknown, defaulting to 1000 [ 87.244238][ T5288] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.304325][ T5288] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.443499][ T5298] lo speed is unknown, defaulting to 1000 [ 87.494998][ T5298] lo speed is unknown, defaulting to 1000 [ 87.544989][ T5307] process 'syz.2.445' launched '/dev/fd/4' with NULL argv: empty string added [ 87.593807][ T5309] vhci_hcd: invalid port number 85 [ 87.598942][ T5309] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 87.649447][ T5311] loop4: detected capacity change from 0 to 512 [ 87.659275][ T5311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.684162][ T5311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.447: bg 0: block 248: padding at end of block bitmap is not set [ 87.703452][ T5311] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.447: Failed to acquire dquot type 1 [ 87.715339][ T5311] EXT4-fs (loop4): 1 truncate cleaned up [ 87.721681][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.739351][ T5311] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 87.752736][ T5311] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.761288][ T5311] ext4 filesystem being remounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.770047][ T5318] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 87.977898][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.019927][ T5325] loop4: detected capacity change from 0 to 2048 [ 88.043824][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.056551][ T5325] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.129185][ T5328] ================================================================== [ 88.137295][ T5328] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 88.144504][ T5328] [ 88.146823][ T5328] read-write to 0xffff8881004956b0 of 8 bytes by task 5325 on cpu 1: [ 88.154883][ T5328] __xa_set_mark+0xd2/0x1a0 [ 88.159392][ T5328] __folio_mark_dirty+0x384/0x4a0 [ 88.164510][ T5328] mark_buffer_dirty+0x11e/0x210 [ 88.169457][ T5328] folio_zero_new_buffers+0x28c/0x2e0 [ 88.174840][ T5328] block_write_end+0x200/0x210 [ 88.179617][ T5328] ext4_da_write_end+0x1d3/0x800 [ 88.184562][ T5328] generic_perform_write+0x312/0x490 [ 88.189852][ T5328] ext4_buffered_write_iter+0x1ee/0x3c0 [ 88.195406][ T5328] ext4_file_write_iter+0x387/0xf60 [ 88.200612][ T5328] vfs_write+0x52a/0x960 [ 88.204868][ T5328] ksys_write+0xda/0x1a0 [ 88.209125][ T5328] __x64_sys_write+0x40/0x50 [ 88.213729][ T5328] x64_sys_call+0x2802/0x3000 [ 88.218419][ T5328] do_syscall_64+0xd2/0x200 [ 88.222928][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.228825][ T5328] [ 88.231149][ T5328] read to 0xffff8881004956b0 of 8 bytes by task 5328 on cpu 0: [ 88.238690][ T5328] xas_find_marked+0x218/0x620 [ 88.243456][ T5328] find_get_entry+0x5d/0x380 [ 88.248091][ T5328] filemap_get_folios_tag+0x13b/0x210 [ 88.253511][ T5328] mpage_prepare_extent_to_map+0x320/0xc00 [ 88.259329][ T5328] ext4_do_writepages+0xa05/0x2750 [ 88.264449][ T5328] ext4_writepages+0x176/0x300 [ 88.269217][ T5328] do_writepages+0x1c6/0x310 [ 88.273809][ T5328] __filemap_fdatawrite_range+0xfb/0x140 [ 88.279451][ T5328] generic_fadvise+0x312/0x430 [ 88.284225][ T5328] __x64_sys_fadvise64+0xcb/0x110 [ 88.289250][ T5328] x64_sys_call+0x29c5/0x3000 [ 88.293923][ T5328] do_syscall_64+0xd2/0x200 [ 88.298424][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.304313][ T5328] [ 88.306621][ T5328] value changed: 0x00001fffffffffff -> 0x00007fffffffffff [ 88.313711][ T5328] [ 88.316021][ T5328] Reported by Kernel Concurrency Sanitizer on: [ 88.322161][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.4.451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 88.333346][ T5328] Tainted: [W]=WARN [ 88.337129][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.347167][ T5328] ================================================================== [ 88.362812][ T5328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.451: bg 0: block 345: padding at end of block bitmap is not set [ 88.377783][ T5328] EXT4-fs (loop4): Remounting filesystem read-only [ 88.385948][ T1885] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 88.838926][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.853008][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.857265][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.870414][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.878659][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0