last executing test programs: 6.590068487s ago: executing program 4 (id=678): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000440)="52804e40e8f59e248531de8ac0f99de328cc9a455901d2f974a0f1cf6f873cf69326f83d6f914fb1435d5fb66204aa1a83f0056d4ad9dfe7a599b9bffc748245e0234442f289260b580156f7a73f888f5d614674c98a2b1de25468670a18ebca8293f2190943b11c40d13d37bc2cd2e1e10e43d0ab9c6c5b7dd9b89d9227046a0f87a6a6023e6c87d72e72fc5755804d0e19cb6eb817e0021c04aec338f255d3aa56dce6cc236d6d8f94fa32e744a24224ffcb08d8b8ba2f57593589559d112536fd939e988eedff0e54f96491e346000000", 0xfffffffffffffc73}, {&(0x7f0000000580)="21b1b531cf847261a6c1a7c64a470edc92114cdf658ef5d838925ff26468fd3d33f0ba5c32362db3008448040d0e779cc3d26d8dda99c3e2a0215945a80680aaeb0015e9325607e77ea411363f16986c3e74347ee78055993292b1d2c1898a5083f24544dfe0ac5c455ad42d5c154bdd7daf"}, {&(0x7f0000000600)="7fb7c5e614706ae54e9d58b49f2767c939078e7535544c848e197398a97c1cba775158c122058438736fcf1e6873a58c95ee2900329370642707a125d1b8b99500702fc454a9000fa342801b8c5b1febbd85814b215da4e068284b0a4b3c99ecf4ec38dabe032e88cd111fe6aceb76a1bec6"}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6.313886575s ago: executing program 1 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$eJzs3M9vVEUcAPDv222L/LIV8QeIgqKRaGxpQeXgAYwmHjQx0QMe67YQpFBDqxFCtHrAoyHxbjya8Bd40otRTyZe9W5IiOECenrm7b7Xvl1217ZsXXA/n2TpzM5bZr7MTHfmDbsBDKx92R9JxLaI+C0iRhvZ5gv2NX7cvH6x9tf1i7Uk0vStP5P6dTeuX6wVlxav21pklpqfL1s4f+H09Nzc7Lk8P7F45v2JhfMXnjt1Zvrk7MnZs1NHjhw+NPniC1PP9yTOrE03dn88v2fXa+9cfqN2/PK7P11Jivib4viwJ/WV/uqyapF4qle13CG2l9LJUB8bwppkAzLrruH6/B+Naqx03mi8+llfGwdsqDRN002di5dS4H8siX63AOiP/H0+iViqZXvg8n5+EFw71tgAZXHfzB+NkqGo5NcMt+xveynbbR1f+vur7BEt91MAADbCd8caP4u138r6o9J0F/9ofjY0FhH3RcSOiLg/InZGxAMR8WBEPBQRD5de0+7cp1XrIcmt65/K1XUFtkrZ+u+l/Gyref1XrP5irJrnttfjH05OnJqbPRgR90bEgRjelOUnu9Tx/Su/ftGpbF9p/Zc9svqLtWDejqtDLTfoZqYXp28n5rJrn0bsHmoXf7J8EpD1466I2L13fXWceuabPZ3K/j3+LnpwzpR+HfF0o/+XoiX+QtL9fHLinpibPThRjIpb/fzLpTdL2dpoKXNb8fdA1v9b2o7/5fjHkvJ57cLa67j0++cd9zSrHP8j5ddk438kebueLgo+ml5cPDcZMZK8nj9/NH++ub76dVMr12fxH9jffv7viJV/iUciIhvEj0bEYxGxN2/74xHxRETs7xL/jy8/+d76499YWfwza+r/jonibPuWourpH76tlxSdNdYl/iTa9P/heupA/ky733+jzUMkurb03O2MZgAAALj7VCJiWySV8eV0pTI+3vj/8jtjS2VufmHx2RPzH5ydaXxGYCyGK8WdrtHl+6GxNJlv669UI7LyqTxf3C89lN83/rK6uZ4fr83PzfQ7eBhwWzvM/8wf1X63DthwPq8Fg2u98z9N00963BTgP+b9HwaX+Q+Dq83839yS7/IdAcDdrN37v409DAbrfxhc5j8MLvMfBpf5DwMp/yT80Go+4L9hiez3T/9qX3siTftU+0j/Y19ORKVvtUe/Y19bIsm/SyO9Q9qzukS9yU4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu94/AQAA//8QtN5n") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x7ff}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001f80), 0x4081, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 6.304216056s ago: executing program 0 (id=684): recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2, &(0x7f0000000700)=""/139, 0x8b}, 0xb}, {{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f00000008c0)=""/181, 0xb5}], 0x2}, 0x3}], 0x2, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f00000001c0)=[{r6, 0x8404}, {r6, 0x3400}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0x8, 0x6, @vifc_lcl_ifindex=r7, @rand_addr=0x64010100}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 5.694770937s ago: executing program 4 (id=686): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000d00000006000800000000000500070012000000050018007f000000050017000000000006000a00ffff0000050019000400000005001a0000000000847ea36cd302ee47f3f281"], 0x4c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80002001}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000) r4 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910680000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x1, 0x0) vmsplice(r8, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r6, &(0x7f0000000280)="8e", 0x1) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, 0x0, 0x0) close(r4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b783008593cc99360000002000850000b3f17bbb57daf8d100000000009f44b155247113dfc8e414271884efa6e46712b6a6df6278b4c7ede99077ce950008285d589a0dd4a05ab9318da54dbcfe57f44a896d5e", @ANYRESDEC=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.670701649s ago: executing program 0 (id=687): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x804) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2c) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00yO$']) 4.939344993s ago: executing program 2 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r0], 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) link(&(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000008c0)='fsi_master_gpio_cmd_rel_addr\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x160, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'gre0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x9, 0x0, 0x50}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "978888d6ee9e7a5e4bc76ccf4228733e737d402fc4a91c346e4f9a692f63"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xfffffefe], [0xffffff00, 0xff, 0xff, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x1, 0x2, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8=r6, @ANYRESHEX=r6, @ANYRES32=r6, @ANYRES8=r6, @ANYRES16=0x0, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r7, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5ee", 0x9e}, {&(0x7f0000000300)='V', 0x1}, {0x0}], 0x3, 0x0, 0x0, 0x8010}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) r10 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r10, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) dup2(r8, r7) 4.632527934s ago: executing program 2 (id=690): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000043fbf4e2c007886618d82daed6ce0000000095f9ff0003000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @mcast2, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000580)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @remote}, 0x2a, {0x2, 0x4e22, @empty}, 'macsec0\x00'}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) exit(0xffff) r4 = epoll_create1(0x80000) epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0xbf7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000010}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb3}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.36956893s ago: executing program 1 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800e3ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c00)='ext4_sync_fs\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x13, @void}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x315f) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000400), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.97343506s ago: executing program 0 (id=692): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchown(0xffffffffffffffff, 0x0, 0xee01) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000300)={[{@nodelalloc}, {@bh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@barrier}, {@noload}, {@nogrpid}]}, 0x1, 0x5ae, &(0x7f0000000780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r4, 0x0, 0x0, 0x7) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x10fff, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000db78a5c5457deabbfc05add4d21d5ecd010000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 3.97310706s ago: executing program 1 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800e3ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c00)='ext4_sync_fs\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r5, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x13, @void}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x315f) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000400), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.884358739s ago: executing program 1 (id=694): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095", @ANYRES8=r1, @ANYRES8, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x0) fsetxattr$system_posix_acl(r8, 0x0, 0x0, 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 3.864983011s ago: executing program 4 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e064000"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18ef00040000e312bbad00000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x1) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x52f3, &(0x7f0000000580)={0x0, 0x86e1, 0x0, 0x80000000, 0x287}, &(0x7f0000010080), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000000) 3.68061303s ago: executing program 0 (id=696): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r4 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) rt_sigsuspend(&(0x7f0000000400), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20399dcc66288079cee3b821da002abd7000ffdbdf250100000008000200010000000800020000000000060006"], 0x34}, 0x1, 0x0, 0x0, 0x20048040}, 0x48096) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 3.68024406s ago: executing program 2 (id=697): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) open(0x0, 0x14927e, 0x6) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x40) write$binfmt_elf32(r1, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) creat(&(0x7f00000002c0)='./file0\x00', 0x109) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x5}, 0x2000, 0x2, 0x800, 0x2, 0xc, 0x1, 0x81, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x10a) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000500)={r4}) set_mempolicy(0x2, &(0x7f00000000c0)=0xffff7ffffffffffd, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x44800) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @private=0xa010102}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000810) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) 3.531895525s ago: executing program 3 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, 0x0, 0x20) close(r1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250c0000001c00028006000e004e220000060002004e21000008e7060008000000080004008000000014000280080005000002000008000700fcffffff08000400020000003c000180080009002a00000014000300e000000100000000000000000000000007000600666f0000090006006c626c630000000008000800090000000800050002000000"], 0x98}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000300), &(0x7f0000000340)={'L+', 0x1}, 0x16, 0x2) prctl$PR_CAPBSET_READ(0x17, 0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x7, 0x7, 0x1000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x7d, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000010a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008380)=ANY=[@ANYRES32], 0x5274}, 0x1, 0x0, 0x0, 0x8d5}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.055569092s ago: executing program 3 (id=699): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300a8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x1, 0x0, 0x2, 0x4, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0) r2 = syz_clone(0x40c0400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) 2.864050422s ago: executing program 4 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$eJzs3M9vVEUcAPDv222L/LIV8QeIgqKRaGxpQeXgAYwmHjQx0QMe67YQpFBDqxFCtHrAoyHxbjya8Bd40otRTyZe9W5IiOECenrm7b7Xvl1217ZsXXA/n2TpzM5bZr7MTHfmDbsBDKx92R9JxLaI+C0iRhvZ5gv2NX7cvH6x9tf1i7Uk0vStP5P6dTeuX6wVlxav21pklpqfL1s4f+H09Nzc7Lk8P7F45v2JhfMXnjt1Zvrk7MnZs1NHjhw+NPniC1PP9yTOrE03dn88v2fXa+9cfqN2/PK7P11Jivib4viwJ/WV/uqyapF4qle13CG2l9LJUB8bwppkAzLrruH6/B+Naqx03mi8+llfGwdsqDRN002di5dS4H8siX63AOiP/H0+iViqZXvg8n5+EFw71tgAZXHfzB+NkqGo5NcMt+xveynbbR1f+vur7BEt91MAADbCd8caP4u138r6o9J0F/9ofjY0FhH3RcSOiLg/InZGxAMR8WBEPBQRD5de0+7cp1XrIcmt65/K1XUFtkrZ+u+l/Gyref1XrP5irJrnttfjH05OnJqbPRgR90bEgRjelOUnu9Tx/Su/ftGpbF9p/Zc9svqLtWDejqtDLTfoZqYXp28n5rJrn0bsHmoXf7J8EpD1466I2L13fXWceuabPZ3K/j3+LnpwzpR+HfF0o/+XoiX+QtL9fHLinpibPThRjIpb/fzLpTdL2dpoKXNb8fdA1v9b2o7/5fjHkvJ57cLa67j0++cd9zSrHP8j5ddk438kebueLgo+ml5cPDcZMZK8nj9/NH++ub76dVMr12fxH9jffv7viJV/iUciIhvEj0bEYxGxN2/74xHxRETs7xL/jy8/+d76499YWfwza+r/jonibPuWourpH76tlxSdNdYl/iTa9P/heupA/ky733+jzUMkurb03O2MZgAAALj7VCJiWySV8eV0pTI+3vj/8jtjS2VufmHx2RPzH5ydaXxGYCyGK8WdrtHl+6GxNJlv669UI7LyqTxf3C89lN83/rK6uZ4fr83PzfQ7eBhwWzvM/8wf1X63DthwPq8Fg2u98z9N00963BTgP+b9HwaX+Q+Dq83839yS7/IdAcDdrN37v409DAbrfxhc5j8MLvMfBpf5DwMp/yT80Go+4L9hiez3T/9qX3siTftU+0j/Y19ORKVvtUe/Y19bIsm/SyO9Q9qzukS9yU4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu94/AQAA//8QtN5n") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x10980, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$inet(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x7ff}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001f80), 0x4081, 0x0) close_range(0xffffffffffffffff, r3, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2.690523139s ago: executing program 2 (id=701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x10, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14101, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x10, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) connect$qrtr(r4, &(0x7f00000014c0)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x5660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000001500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r9, r3, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, 0x0, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000ff0f00000000000000000000000000008b7c000000000000000800000000000000000000000000000069a664dc1993ac427dffffffff00000000ffffffffffffffff0000000000000000faffffffffffffff0000000000000000000000000000000004000000b56b6e67b7e9c53645b262500fa1a149da5bae365ebf376c40d397639779bd5f64d0ee9a602c65eee35df500"], 0xb8}}, 0x0) 2.209531507s ago: executing program 3 (id=702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800e3ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c00)='ext4_sync_fs\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x13, @void}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x315f) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000400), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.024617076s ago: executing program 0 (id=703): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x9, 0x0, 0x3, 0x0, 0x9, 0x3fff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x3c, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r9, 0x30b, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) 1.505756258s ago: executing program 1 (id=704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="4e11f4292922c904e664e411cdbabcd6ba6be9561ad1a7489e010e355671e020691f2bd2b71a8936ae2b27129db4219a2654cee490d63784e561be0c7b11f819451db0c5a5c0e6d921eab8fb774367daabd875977d1555d7023f0524283a265eeb12a909da8a161f946397e9f6c7e0efe3900b38cf03166296a0895fae22408895352eb0af0c276f40765bf30a853732495b3e3725c0cbb435ff849cde394f6b78fa765a4309cc550b20ed41697722cd1dca59baff7a76a10b", 0xb9) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="200100000000000000400000000000000000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000400020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000060"], 0x150}}, 0x804) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2c) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f00000005c0)={&(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r9, &(0x7f0000000140)=""/15, 0xf, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',\x00\x00yO$']) 1.505359628s ago: executing program 3 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800e3ffffffff7a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c00)='ext4_sync_fs\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r5, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x13, @void}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000300)=0x315f) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000400), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.333248035s ago: executing program 3 (id=706): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000043fbf4e2c007886618d82daed6ce0000000095f9ff0003000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @mcast2, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000580)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @remote}, 0x2a, {0x2, 0x4e22, @empty}, 'macsec0\x00'}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) exit(0xffff) r4 = epoll_create1(0x80000) epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0xbf7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000010}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb3}, 0x50) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.18995008s ago: executing program 4 (id=707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x2, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000340)=[{0x6, 0x2}, {0x1, 0x8, 0x8, 0xfffffffc}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x800000009) 340.545815ms ago: executing program 2 (id=708): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchown(0xffffffffffffffff, 0x0, 0xee01) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000300)={[{@nodelalloc}, {@bh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@barrier}, {@noload}, {@nogrpid}]}, 0x1, 0x5ae, &(0x7f0000000780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r4, 0x0, 0x0, 0x7) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x10fff, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000db78a5c5457deabbfc05add4d21d5ecd010000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 339.752675ms ago: executing program 0 (id=718): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) lchown(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r5, 0x0, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) tee(r3, r0, 0x2, 0x6) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x38, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000580)="48e03329ad7d55b25b2ec5d6e1438693bede882fd5a85a8344e4b4583c1ccd3ef8fbae0b79b6e1065bc8658a1118eb08254e5010f2f7eec61a92112d3e8a65011238210947704e9e9f3cd94ce1c9ed1e0f9c0cff2d10ad7a2359af817545294fbddbf2c30792f5608d35499f73708c4a69ee77ee79187bd5", &(0x7f0000000700)=""/249, &(0x7f0000000640)="b1e9fd7db421c72ec26a7bc399a2e0ff7f77c29117619cc64a1f73f0fa856540c473ee", &(0x7f00000002c0)="3414c95cc72fec2053ca15ea086b81ecf5349866f8d819ab", 0x2, r4, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 339.085316ms ago: executing program 3 (id=719): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x8000000000000000}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000000706010800000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@kprobe_multi=@syms={0x1, 0x4, &(0x7f0000000600)=[&(0x7f00000004c0)='\x00', &(0x7f0000000540)='pim6reg0\x00', &(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)=',*.*\x00'], 0x0, 0x800}}, 0x30) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="29f86e0180c2000002aaaaaaaaaaaa81004579a3efbd62f5bcd1470a36869041082c00001c0067000000019078ac1e"], 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) epoll_wait(r6, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 239.891705ms ago: executing program 1 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r5, &(0x7f0000000200)=""/202, 0xca) tkill(r4, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='xen_mmu_flush_tlb_one_user\x00', r6}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001000)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b34366d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c90e18ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfab83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e3631de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad544dde3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff740556087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d2787dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56ffd7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cdef055b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a792131", 0xd6}, {0x0}], 0x7, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000000)={r14, 0x3}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000000000)={r14, 0xffffba97}, &(0x7f0000000040)=0x8) recvmsg$unix(r10, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000004280)=""/4086, 0xff6}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000400)=""/13, 0xd}], 0x3}, 0x40000100) ioctl$EVIOCSABS3F(r8, 0x401845ff, &(0x7f0000000140)={0x3fe000, 0xa9a6, 0x7, 0xfffffff2, 0xc36f, 0xfffffffb}) 9.846439ms ago: executing program 4 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, 0x0, 0x20) close(r1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf250c0000001c00028006000e004e220000060002004e21000008e7060008000000080004008000000014000280080005000002000008000700fcffffff08000400020000003c000180080009002a00000014000300e000000100000000000000000000000007000600666f0000090006006c626c630000000008000800090000000800050002000000"], 0x98}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000300), &(0x7f0000000340)={'L+', 0x1}, 0x16, 0x2) prctl$PR_CAPBSET_READ(0x17, 0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x7, 0x7, 0x1000}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x7d, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000010a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008380)=ANY=[@ANYRES32], 0x5274}, 0x1, 0x0, 0x0, 0x8d5}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=711): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_complete\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000400), &(0x7f00000003c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_getfd(r10, r10, 0x0) r11 = open(&(0x7f00000006c0)='./file2\x00', 0x105142, 0x128) sendfile(r11, r11, 0x0, 0x800000009) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) kernel console output (not intermixed with test programs): 22: mark_inode_dirty error [ 95.296766][ T5443] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 95.306028][ T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 95.320995][ T5443] EXT4-fs (loop1): 1 truncate cleaned up [ 95.329137][ T31] EXT4-fs (loop4): Remounting filesystem read-only [ 95.348166][ T5443] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.422: path /83/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 95.490044][ T5450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5450 comm=syz.4.424 [ 95.672322][ T5454] loop3: detected capacity change from 0 to 764 [ 95.719233][ T5454] Symlink component flag not implemented [ 95.724944][ T5454] Symlink component flag not implemented [ 95.738958][ T5454] Symlink component flag not implemented (129) [ 95.745378][ T5454] Symlink component flag not implemented (6) [ 95.755147][ T5454] rock: directory entry would overflow storage [ 95.761465][ T5454] rock: sig=0x4f50, size=4, remaining=3 [ 95.767035][ T5454] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 95.852900][ T5460] siw: device registration error -23 [ 95.954399][ T5470] loop1: detected capacity change from 0 to 512 [ 95.967861][ T5450] loop4: detected capacity change from 0 to 1024 [ 95.976870][ T5470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.984552][ T5470] EXT4-fs: Ignoring removed bh option [ 96.019296][ T5470] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 96.039869][ T5470] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.431: corrupted inode contents [ 96.047007][ T5450] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.424: Allocating blocks 449-513 which overlap fs metadata [ 96.071673][ T5470] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.431: mark_inode_dirty error [ 96.083757][ T5470] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.431: invalid indirect mapped block 1 (level 1) [ 96.097628][ T5470] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.431: corrupted inode contents [ 96.109834][ T5470] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 96.112741][ T5449] EXT4-fs (loop4): pa ffff8881072c0620: logic 48, phys. 177, len 21 [ 96.127442][ T5470] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.431: corrupted inode contents [ 96.127590][ T5470] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.431: mark_inode_dirty error [ 96.127705][ T5470] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 96.127827][ T5470] EXT4-fs (loop1): 1 truncate cleaned up [ 96.140512][ T5449] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 96.233001][ T5470] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.431: path /84/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 96.462429][ T5470] validate_nla: 6 callbacks suppressed [ 96.462444][ T5470] netlink: 'syz.1.431': attribute type 3 has an invalid length. [ 96.495868][ T5470] netlink: 'syz.1.431': attribute type 3 has an invalid length. [ 96.702403][ T5489] loop2: detected capacity change from 0 to 512 [ 96.709471][ T5489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.717045][ T5489] EXT4-fs: Ignoring removed bh option [ 96.749894][ T5489] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 96.792847][ T5492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 96.816436][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.435: corrupted inode contents [ 96.873329][ T5489] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.435: mark_inode_dirty error [ 96.903696][ T5489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.435: invalid indirect mapped block 1 (level 1) [ 96.908568][ T5492] loop3: detected capacity change from 0 to 2048 [ 96.927246][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.435: corrupted inode contents [ 96.943081][ T5489] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 96.943498][ T5492] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.952436][ T5489] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.435: corrupted inode contents [ 96.952596][ T5489] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.435: mark_inode_dirty error [ 96.999349][ T5489] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 97.016383][ T5489] EXT4-fs (loop2): 1 truncate cleaned up [ 97.028149][ T5489] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.435: path /82/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 97.059683][ T5495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.097631][ T5495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.154531][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 97.227590][ T5489] netlink: 'syz.2.435': attribute type 3 has an invalid length. [ 97.239224][ T5489] netlink: 'syz.2.435': attribute type 3 has an invalid length. [ 97.411874][ T5505] loop4: detected capacity change from 0 to 764 [ 97.434795][ T5505] Symlink component flag not implemented [ 97.441521][ T5505] Symlink component flag not implemented [ 97.452075][ T5505] Symlink component flag not implemented (129) [ 97.458276][ T5505] Symlink component flag not implemented (6) [ 97.468489][ T5505] rock: directory entry would overflow storage [ 97.475632][ T5505] rock: sig=0x4f50, size=4, remaining=3 [ 97.482218][ T5505] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 97.586824][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.665883][ T5512] loop2: detected capacity change from 0 to 512 [ 97.734355][ T5512] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.744315][ T5512] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 97.824747][ T5512] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 97.873428][ T5512] System zones: 0-2, 18-18, 34-35 [ 97.939056][ T5520] loop1: detected capacity change from 0 to 512 [ 97.946015][ T5520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.952662][ T5520] EXT4-fs: Ignoring removed bh option [ 97.982275][ T5520] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 97.997347][ T31] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 98.009356][ T5520] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.442: corrupted inode contents [ 98.042462][ T31] EXT4-fs (loop3): Remounting filesystem read-only [ 98.119023][ T5520] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.442: mark_inode_dirty error [ 98.168067][ T5520] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.442: invalid indirect mapped block 1 (level 1) [ 98.201649][ T5520] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.442: corrupted inode contents [ 98.217827][ T5520] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 98.239857][ T5520] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.442: corrupted inode contents [ 98.266035][ T5520] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.442: mark_inode_dirty error [ 98.304350][ T5520] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 98.325233][ T5520] EXT4-fs (loop1): 1 truncate cleaned up [ 98.358161][ T5520] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.442: path /86/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 98.526973][ T5520] netlink: 'syz.1.442': attribute type 3 has an invalid length. [ 98.536486][ T5520] netlink: 'syz.1.442': attribute type 3 has an invalid length. [ 98.584771][ T5534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5534 comm=syz.0.445 [ 98.619773][ T5537] loop3: detected capacity change from 0 to 512 [ 98.629682][ T5537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.636349][ T5537] EXT4-fs: Ignoring removed bh option [ 98.643771][ T5537] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 98.658517][ T5537] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.447: corrupted inode contents [ 98.671632][ T5537] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.447: mark_inode_dirty error [ 98.695272][ T5537] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.447: invalid indirect mapped block 1 (level 1) [ 98.712058][ T5537] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.447: corrupted inode contents [ 98.730330][ T5537] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 98.739258][ T5537] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.447: corrupted inode contents [ 98.752400][ T5537] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.447: mark_inode_dirty error [ 98.792132][ T5537] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 98.814577][ T5537] EXT4-fs (loop3): 1 truncate cleaned up [ 98.834548][ T5537] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.447: path /82/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 98.918891][ T5537] netlink: 'syz.3.447': attribute type 3 has an invalid length. [ 98.926863][ T5537] netlink: 'syz.3.447': attribute type 3 has an invalid length. [ 99.002133][ T5544] loop4: detected capacity change from 0 to 128 [ 99.022359][ T5544] vfat: Unknown parameter '' [ 99.122120][ T5547] loop4: detected capacity change from 0 to 512 [ 99.129077][ T5547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.135744][ T5547] EXT4-fs: Ignoring removed bh option [ 99.147900][ T5547] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 99.179560][ T5547] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.451: corrupted inode contents [ 99.191716][ T5547] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.451: mark_inode_dirty error [ 99.203384][ T5547] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.451: invalid indirect mapped block 1 (level 1) [ 99.216809][ T5547] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.451: corrupted inode contents [ 99.228718][ T5547] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 99.238269][ T5547] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.451: corrupted inode contents [ 99.250905][ T5547] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.451: mark_inode_dirty error [ 99.262830][ T5547] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 99.272730][ T5547] EXT4-fs (loop4): 1 truncate cleaned up [ 99.278893][ T5547] EXT4-fs mount: 26 callbacks suppressed [ 99.278907][ T5547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.299917][ T5547] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.451: path /100/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 99.343281][ T29] kauditd_printk_skb: 9506 callbacks suppressed [ 99.343295][ T29] audit: type=1326 audit(1763198698.698:53686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcf1b66567 code=0x7ffc0000 [ 99.389364][ T5547] netlink: 'syz.4.451': attribute type 3 has an invalid length. [ 99.398032][ T5547] netlink: 'syz.4.451': attribute type 3 has an invalid length. [ 99.405016][ T29] audit: type=1326 audit(1763198698.728:53687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcf1b0b789 code=0x7ffc0000 [ 99.429022][ T29] audit: type=1326 audit(1763198698.728:53688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcf1b66567 code=0x7ffc0000 [ 99.452362][ T29] audit: type=1326 audit(1763198698.728:53689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcf1b0b789 code=0x7ffc0000 [ 99.460123][ T5550] siw: device registration error -23 [ 99.475677][ T29] audit: type=1326 audit(1763198698.728:53690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efcf1b6f6c9 code=0x7ffc0000 [ 99.475760][ T29] audit: type=1326 audit(1763198698.738:53691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcf1b66567 code=0x7ffc0000 [ 99.475804][ T29] audit: type=1326 audit(1763198698.738:53692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcf1b0b789 code=0x7ffc0000 [ 99.475833][ T29] audit: type=1326 audit(1763198698.738:53693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7efcf1b6f6c9 code=0x7ffc0000 [ 99.475863][ T29] audit: type=1326 audit(1763198698.738:53694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcf1b66567 code=0x7ffc0000 [ 99.475967][ T29] audit: type=1326 audit(1763198698.738:53695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5541 comm="syz.1.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcf1b0b789 code=0x7ffc0000 [ 99.631990][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.660344][ T4125] Bluetooth: hci0: command 0x1003 tx timeout [ 99.661316][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.692441][ T5558] Cannot find del_set index 3 as target [ 99.700452][ T5558] xt_l2tp: missing protocol rule (udp|l2tpip) [ 99.702362][ T5559] siw: device registration error -23 [ 99.715193][ T3426] IPVS: starting estimator thread 0... [ 99.721269][ T5558] IPVS: lc: FWM 3 0x00000003 - no destination available [ 99.752023][ T5570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'. [ 99.810236][ T5565] IPVS: using max 2256 ests per chain, 112800 per kthread [ 99.842609][ T5574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.866183][ T5574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.878789][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 99.964870][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.200065][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.357102][ T5586] loop4: detected capacity change from 0 to 512 [ 100.396700][ T5586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.404363][ T5586] EXT4-fs: Ignoring removed bh option [ 100.472120][ T5586] /dev/loop4: Can't open blockdev [ 101.350081][ T5599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5599 comm=syz.3.465 [ 101.369160][ T5594] loop1: detected capacity change from 0 to 128 [ 101.396829][ T5594] vfat: Unknown parameter '' [ 101.444968][ T5606] siw: device registration error -23 [ 101.446199][ T5605] loop4: detected capacity change from 0 to 128 [ 101.484584][ T5605] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.488877][ T5609] loop2: detected capacity change from 0 to 512 [ 101.512476][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.519113][ T5609] EXT4-fs: Ignoring removed bh option [ 101.525585][ T5605] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.550649][ T5609] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 101.577224][ T5609] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.468: corrupted inode contents [ 101.589351][ T5609] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.468: mark_inode_dirty error [ 101.603900][ T5609] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.468: invalid indirect mapped block 1 (level 1) [ 101.622216][ T5609] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.468: corrupted inode contents [ 101.634306][ T5609] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 101.643228][ T5609] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.468: corrupted inode contents [ 101.655292][ T5609] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.468: mark_inode_dirty error [ 101.666728][ T5609] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 101.675801][ T5609] EXT4-fs (loop2): 1 truncate cleaned up [ 101.681928][ T1907] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.692066][ T5609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.705628][ T5609] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.468: path /87/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 101.736229][ T5616] Cannot find del_set index 3 as target [ 101.754149][ T5616] xt_l2tp: missing protocol rule (udp|l2tpip) [ 101.789732][ T4181] IPVS: starting estimator thread 0... [ 101.797624][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.805515][ T5616] IPVS: lc: FWM 3 0x00000003 - no destination available [ 101.807150][ T5609] validate_nla: 4 callbacks suppressed [ 101.807170][ T5609] netlink: 'syz.2.468': attribute type 3 has an invalid length. [ 101.826258][ T5609] netlink: 'syz.2.468': attribute type 3 has an invalid length. [ 101.834179][ T5599] loop3: detected capacity change from 0 to 1024 [ 101.853052][ T5599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.869245][ T5625] loop4: detected capacity change from 0 to 512 [ 101.880578][ T5624] IPVS: using max 2448 ests per chain, 122400 per kthread [ 101.881687][ T5629] lo speed is unknown, defaulting to 1000 [ 101.893886][ T5625] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.893904][ T5625] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 101.894815][ T5625] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 101.904623][ T5629] lo speed is unknown, defaulting to 1000 [ 101.927754][ T5629] lo speed is unknown, defaulting to 1000 [ 101.935904][ T5629] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 101.951589][ T5629] lo speed is unknown, defaulting to 1000 [ 101.957910][ T5629] lo speed is unknown, defaulting to 1000 [ 101.965116][ T5629] lo speed is unknown, defaulting to 1000 [ 101.966114][ T5599] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.465: Allocating blocks 449-513 which overlap fs metadata [ 101.972129][ T5629] lo speed is unknown, defaulting to 1000 [ 101.985306][ T5625] System zones: 0-2, 18-18, 34-35 [ 101.985787][ T5625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 101.992606][ T5629] lo speed is unknown, defaulting to 1000 [ 102.013197][ T5598] EXT4-fs (loop3): pa ffff88810593b150: logic 48, phys. 177, len 21 [ 102.022959][ T5598] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 102.125218][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.324258][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.362742][ T5640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.473'. [ 102.401336][ T5640] loop2: detected capacity change from 0 to 2048 [ 102.414178][ T5635] netlink: 'syz.0.484': attribute type 3 has an invalid length. [ 102.422121][ T5635] netlink: 'syz.0.484': attribute type 3 has an invalid length. [ 102.423260][ T5640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.441919][ T5640] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.515603][ T5651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.536711][ T5651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.546292][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 103.489075][ T5653] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 103.528025][ T5653] netlink: 'syz.0.476': attribute type 3 has an invalid length. [ 103.762152][ T5666] loop1: detected capacity change from 0 to 512 [ 103.768768][ T5666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.776291][ T5666] EXT4-fs: Ignoring removed bh option [ 103.776309][ T5664] loop3: detected capacity change from 0 to 128 [ 103.777424][ T5664] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.802043][ T5664] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.811483][ T4125] Bluetooth: hci0: command 0x1003 tx timeout [ 103.811683][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.827793][ T5666] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 103.843327][ T5666] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.492: corrupted inode contents [ 103.855292][ T5666] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.492: mark_inode_dirty error [ 103.857865][ T1907] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.866830][ T5666] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.492: invalid indirect mapped block 1 (level 1) [ 103.866946][ T5666] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.492: corrupted inode contents [ 103.867075][ T5666] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 103.867168][ T5666] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.492: corrupted inode contents [ 103.867380][ T5666] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.492: mark_inode_dirty error [ 103.867530][ T5666] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 103.867630][ T5666] EXT4-fs (loop1): 1 truncate cleaned up [ 103.922834][ T5669] siw: device registration error -23 [ 103.943367][ T5666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.979642][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 103.997891][ T5666] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.492: path /96/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 104.003482][ T12] EXT4-fs (loop2): Remounting filesystem read-only [ 104.102359][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.138523][ T5674] loop3: detected capacity change from 0 to 128 [ 104.161368][ T5666] netlink: 'syz.1.492': attribute type 3 has an invalid length. [ 104.166097][ T5674] vfat: Unknown parameter '' [ 104.173273][ T5666] netlink: 'syz.1.492': attribute type 3 has an invalid length. [ 104.185987][ T5678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 104.213440][ T5676] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 104.222228][ T5676] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 104.258362][ T5678] loop2: detected capacity change from 0 to 2048 [ 104.284079][ T5678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.296378][ T5678] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.359781][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.369913][ T5683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.381784][ T5683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.401821][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 104.598148][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.622904][ T5686] loop4: detected capacity change from 0 to 512 [ 104.633959][ T5689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5689 comm=syz.1.486 [ 104.636506][ T5686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.653219][ T5686] EXT4-fs: Ignoring removed bh option [ 104.661903][ T5688] loop3: detected capacity change from 0 to 512 [ 104.668467][ T5688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.675123][ T5688] EXT4-fs: Ignoring removed bh option [ 104.686773][ T5686] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 104.702197][ T5686] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.499: corrupted inode contents [ 104.714633][ T5688] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 104.729460][ T5686] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.499: mark_inode_dirty error [ 104.741377][ T5688] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.498: corrupted inode contents [ 104.756000][ T5686] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.499: invalid indirect mapped block 1 (level 1) [ 104.769234][ T5688] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.498: mark_inode_dirty error [ 104.769457][ T5686] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.499: corrupted inode contents [ 104.792661][ T5688] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.498: invalid indirect mapped block 1 (level 1) [ 104.806838][ T5688] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.498: corrupted inode contents [ 104.809308][ T5686] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 104.828342][ T5689] loop1: detected capacity change from 0 to 1024 [ 104.829792][ T5686] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.499: corrupted inode contents [ 104.848282][ T5688] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 104.858764][ T5688] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.498: corrupted inode contents [ 104.863128][ T5686] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.499: mark_inode_dirty error [ 104.872176][ T5688] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.498: mark_inode_dirty error [ 104.881779][ T5686] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 104.881913][ T5686] EXT4-fs (loop4): 1 truncate cleaned up [ 104.882330][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.888206][ T5686] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.499: path /108/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 104.895268][ T5688] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 104.959150][ T5688] EXT4-fs (loop3): 1 truncate cleaned up [ 104.965607][ T5688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.965834][ T29] kauditd_printk_skb: 9564 callbacks suppressed [ 104.965846][ T29] audit: type=1326 audit(1763198704.308:63260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5685 comm="syz.4.499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ecda3f6c9 code=0x0 [ 104.978867][ T5689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.993716][ T5688] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.498: path /90/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 105.038567][ T5689] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.486: Allocating blocks 449-513 which overlap fs metadata [ 105.069778][ T5687] EXT4-fs (loop1): pa ffff88810593b070: logic 48, phys. 177, len 21 [ 105.077840][ T5687] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 105.101636][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 105.104040][ T29] audit: type=1400 audit(1763198704.458:63261): avc: denied { create } for pid=5697 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.116363][ T12] EXT4-fs (loop2): Remounting filesystem read-only [ 105.189898][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.197928][ T29] audit: type=1400 audit(1763198704.508:63262): avc: denied { execmem } for pid=5697 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.269856][ T29] audit: type=1326 audit(1763198704.598:63263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5684 comm="syz.3.498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79199df6c9 code=0x0 [ 105.272202][ T5701] Cannot find add_set index 0 as target [ 105.317126][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.385550][ T5701] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.403217][ T3368] IPVS: starting estimator thread 0... [ 105.426753][ T29] audit: type=1326 audit(1763198704.778:63264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 105.426808][ T29] audit: type=1326 audit(1763198704.778:63265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 105.427046][ T29] audit: type=1326 audit(1763198704.778:63266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 105.427288][ T29] audit: type=1326 audit(1763198704.778:63267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 105.427414][ T29] audit: type=1326 audit(1763198704.778:63268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 105.427599][ T29] audit: type=1326 audit(1763198704.778:63269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.2.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 105.544933][ T5710] IPVS: using max 2640 ests per chain, 132000 per kthread [ 105.586811][ T5711] loop1: detected capacity change from 0 to 4096 [ 105.595734][ T5711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.602109][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.628108][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.682182][ T5718] siw: device registration error -23 [ 105.844043][ T5730] netlink: 100 bytes leftover after parsing attributes in process `syz.3.493'. [ 105.860073][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 106.216070][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.603909][ T5748] loop3: detected capacity change from 0 to 512 [ 106.604128][ T5748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.604181][ T5748] EXT4-fs: Ignoring removed bh option [ 106.612276][ T5748] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 106.612577][ T5748] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.502: corrupted inode contents [ 106.612761][ T5748] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.502: mark_inode_dirty error [ 106.612940][ T5748] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.502: invalid indirect mapped block 1 (level 1) [ 106.613087][ T5748] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.502: corrupted inode contents [ 106.613241][ T5748] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 106.613473][ T5748] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.502: corrupted inode contents [ 106.613599][ T5748] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.502: mark_inode_dirty error [ 106.613852][ T5748] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 106.613963][ T5748] EXT4-fs (loop3): 1 truncate cleaned up [ 106.614473][ T5748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.617004][ T5748] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.502: path /94/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 106.637434][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 106.726224][ T5750] loop4: detected capacity change from 0 to 2048 [ 106.841912][ T5748] validate_nla: 5 callbacks suppressed [ 106.841927][ T5748] netlink: 'syz.3.502': attribute type 3 has an invalid length. [ 106.865952][ T5748] netlink: 'syz.3.502': attribute type 3 has an invalid length. [ 106.872420][ T5750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.898251][ T5755] loop2: detected capacity change from 0 to 512 [ 106.909340][ T5755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.916096][ T5755] EXT4-fs: Ignoring removed bh option [ 106.939424][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.949763][ T5755] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 106.964980][ T5755] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.505: corrupted inode contents [ 106.976913][ T5755] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.505: mark_inode_dirty error [ 106.988655][ T5755] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.505: invalid indirect mapped block 1 (level 1) [ 106.990807][ T5760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.013246][ T5755] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.505: corrupted inode contents [ 107.026354][ T5755] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 107.030371][ T5760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.037353][ T5755] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.505: corrupted inode contents [ 107.056642][ T5755] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.505: mark_inode_dirty error [ 107.069001][ T5755] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 107.079422][ T5755] EXT4-fs (loop2): 1 truncate cleaned up [ 107.086648][ T5755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.093854][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 107.104661][ T5755] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.505: path /93/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 107.186508][ T5763] loop1: detected capacity change from 0 to 512 [ 107.191627][ T5755] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 107.199015][ T5763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.200654][ T5755] netlink: 'syz.2.505': attribute type 3 has an invalid length. [ 107.207280][ T5763] EXT4-fs: Ignoring removed bh option [ 107.223056][ T5763] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 107.238961][ T5763] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.506: corrupted inode contents [ 107.254081][ T5763] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.506: mark_inode_dirty error [ 107.265752][ T5763] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.506: invalid indirect mapped block 1 (level 1) [ 107.279475][ T5763] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.506: corrupted inode contents [ 107.291803][ T5763] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 107.301193][ T5763] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.506: corrupted inode contents [ 107.313931][ T5763] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.506: mark_inode_dirty error [ 107.325863][ T5763] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 107.335633][ T5763] EXT4-fs (loop1): 1 truncate cleaned up [ 107.342368][ T5763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.358123][ T5763] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.506: path /101/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 107.418110][ T5763] netlink: 'syz.1.506': attribute type 3 has an invalid length. [ 107.426463][ T5763] netlink: 'syz.1.506': attribute type 3 has an invalid length. [ 107.442364][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.473323][ T5767] loop3: detected capacity change from 0 to 128 [ 107.489681][ T5767] vfat: Unknown parameter '' [ 107.538733][ T5770] siw: device registration error -23 [ 107.735784][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.799006][ T4108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set [ 107.814116][ T4108] EXT4-fs (loop4): Remounting filesystem read-only [ 107.846873][ T5783] loop2: detected capacity change from 0 to 4096 [ 107.859139][ T5783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.875352][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.026474][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.643412][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.011163][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.068594][ T5808] loop2: detected capacity change from 0 to 512 [ 109.091429][ T5808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.098129][ T5808] EXT4-fs: Ignoring removed bh option [ 109.134827][ T5808] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 109.150703][ T5808] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.517: corrupted inode contents [ 109.163008][ T5808] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.517: mark_inode_dirty error [ 109.174994][ T5808] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.517: invalid indirect mapped block 1 (level 1) [ 109.191953][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 109.199383][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.200461][ T5808] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.517: corrupted inode contents [ 109.207798][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.221158][ T5808] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 109.227679][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.235930][ T5808] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.517: corrupted inode contents [ 109.236079][ T5808] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.517: mark_inode_dirty error [ 109.244501][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.259379][ T5820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5820 comm=syz.4.518 [ 109.267407][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.275134][ T5808] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 109.314265][ T5808] EXT4-fs (loop2): 1 truncate cleaned up [ 109.325562][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.333965][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.342550][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 109.350034][ T4181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 109.354783][ T5808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.362564][ T4181] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 109.381494][ T5808] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.517: path /95/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 109.427916][ T5825] fido_id[5825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.481320][ T5808] netlink: 'syz.2.517': attribute type 3 has an invalid length. [ 109.496496][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 109.498227][ T5808] netlink: 'syz.2.517': attribute type 3 has an invalid length. [ 109.615220][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 109.644821][ T5833] netlink: 'syz.0.522': attribute type 3 has an invalid length. [ 109.653556][ T5833] netlink: 'syz.0.522': attribute type 3 has an invalid length. [ 109.675107][ T5838] loop1: detected capacity change from 0 to 2048 [ 109.692372][ T5838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.705360][ T5840] loop4: detected capacity change from 0 to 512 [ 109.705747][ T5840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.718377][ T5840] EXT4-fs: Ignoring removed bh option [ 109.734908][ T5840] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 109.750429][ T5840] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.525: corrupted inode contents [ 109.763331][ T5840] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.525: mark_inode_dirty error [ 109.775765][ T5840] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.525: invalid indirect mapped block 1 (level 1) [ 109.791826][ T5845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.802186][ T5840] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.525: corrupted inode contents [ 109.815014][ T5845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.826608][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 109.836559][ T5840] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 109.848593][ T5840] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.525: corrupted inode contents [ 109.860677][ T5840] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.525: mark_inode_dirty error [ 109.871975][ T5840] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 109.881385][ T5840] EXT4-fs (loop4): 1 truncate cleaned up [ 109.887444][ T5840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.916840][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.945801][ T5847] loop3: detected capacity change from 0 to 2048 [ 109.954441][ T5840] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.525: path /116/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 109.983413][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.998187][ T29] kauditd_printk_skb: 5975 callbacks suppressed [ 109.998201][ T29] audit: type=1400 audit(109.973:69245): avc: denied { tracepoint } for pid=5850 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.015960][ T5847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.528'. [ 110.033664][ T29] audit: type=1400 audit(109.973:69246): avc: denied { write open } for pid=5846 comm="syz.3.528" path="/100/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.057098][ T29] audit: type=1400 audit(109.973:69247): avc: denied { mounton } for pid=5846 comm="syz.3.528" path="/100/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.081430][ T29] audit: type=1326 audit(110.013:69248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.105404][ T29] audit: type=1326 audit(110.013:69249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.128937][ T29] audit: type=1326 audit(110.013:69250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.152304][ T29] audit: type=1326 audit(110.013:69251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.175728][ T29] audit: type=1326 audit(110.013:69252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.199194][ T29] audit: type=1326 audit(110.013:69253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.222992][ T29] audit: type=1326 audit(110.013:69254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5850 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dd268f6c9 code=0x7ffc0000 [ 110.306144][ T3320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 110.322378][ T3320] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 110.347815][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.538196][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.630940][ T4110] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 110.719239][ T4110] EXT4-fs (loop1): Remounting filesystem read-only [ 110.978814][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.329148][ T5875] tipc: Enabled bearer , priority 0 [ 111.404251][ T5874] tipc: Disabling bearer [ 111.521753][ T5882] siw: device registration error -23 [ 111.544338][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.578769][ T5896] loop4: detected capacity change from 0 to 512 [ 111.589599][ T5892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5892 comm=syz.2.536 [ 111.602581][ T5896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.609195][ T5896] EXT4-fs: Ignoring removed bh option [ 111.622761][ T5898] loop1: detected capacity change from 0 to 512 [ 111.629447][ T5896] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 111.654688][ T5896] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.537: corrupted inode contents [ 111.668322][ T5896] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.537: mark_inode_dirty error [ 111.705453][ T5898] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.714619][ T5898] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 111.726826][ T5896] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.537: invalid indirect mapped block 1 (level 1) [ 111.747174][ T5896] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.537: corrupted inode contents [ 111.760485][ T5898] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 111.768535][ T5898] System zones: 0-2, 18-18, 34-35 [ 111.791695][ T5896] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 111.825198][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 111.906591][ T5896] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.537: corrupted inode contents [ 111.962748][ T5896] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.537: mark_inode_dirty error [ 112.021840][ T5896] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 112.073834][ T5896] EXT4-fs (loop4): 1 truncate cleaned up [ 112.100926][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.170697][ T5896] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.537: path /119/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 112.526565][ T5896] validate_nla: 2 callbacks suppressed [ 112.526580][ T5896] netlink: 'syz.4.537': attribute type 3 has an invalid length. [ 112.612800][ T5896] netlink: 'syz.4.537': attribute type 3 has an invalid length. [ 112.852833][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.895049][ T5910] tipc: New replicast peer: 255.255.255.83 [ 112.901255][ T5910] tipc: Enabled bearer , priority 10 [ 112.948744][ T5916] loop3: detected capacity change from 0 to 512 [ 112.959816][ T5916] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.972240][ T5916] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.975792][ T5916] EXT4-fs (loop3): 1 truncate cleaned up [ 112.976207][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.025051][ T5921] loop2: detected capacity change from 0 to 512 [ 113.030045][ T5921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.030065][ T5921] EXT4-fs: Ignoring removed bh option [ 113.036607][ T5921] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 113.036665][ T5921] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.541: corrupted inode contents [ 113.040108][ T5921] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.541: mark_inode_dirty error [ 113.040653][ T5921] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.541: invalid indirect mapped block 1 (level 1) [ 113.040915][ T5921] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.541: corrupted inode contents [ 113.043268][ T5921] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 113.048371][ T5921] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.541: corrupted inode contents [ 113.048808][ T5921] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.541: mark_inode_dirty error [ 113.048978][ T5921] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 113.049100][ T5921] EXT4-fs (loop2): 1 truncate cleaned up [ 113.049487][ T5921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.054096][ T5921] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.541: path /101/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 113.166571][ T1051] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 113.202932][ T5930] fido_id[5930]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.240787][ T5921] netlink: 'syz.2.541': attribute type 3 has an invalid length. [ 113.314236][ T5921] netlink: 'syz.2.541': attribute type 3 has an invalid length. [ 113.391522][ T5934] loop4: detected capacity change from 0 to 512 [ 113.399861][ T5934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.407458][ T5934] EXT4-fs: Ignoring removed bh option [ 113.418395][ T5934] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 113.439416][ T5934] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.542: corrupted inode contents [ 113.453185][ T5934] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.542: mark_inode_dirty error [ 113.481465][ T5934] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.542: invalid indirect mapped block 1 (level 1) [ 113.508784][ T5934] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.542: corrupted inode contents [ 113.510533][ T5937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.543'. [ 113.521853][ T5934] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 113.538673][ T5934] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.542: corrupted inode contents [ 113.550819][ T5934] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.542: mark_inode_dirty error [ 113.562884][ T5934] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 113.571260][ T3514] Bluetooth: hci0: command 0x1003 tx timeout [ 113.572450][ T5934] EXT4-fs (loop4): 1 truncate cleaned up [ 113.577806][ T4125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.584647][ T5934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.610427][ T5934] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.542: path /121/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 113.655774][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.689381][ T5934] netlink: 'syz.4.542': attribute type 3 has an invalid length. [ 113.698087][ T5934] netlink: 'syz.4.542': attribute type 3 has an invalid length. [ 113.740913][ T5939] bond0: entered promiscuous mode [ 113.746054][ T5939] bond_slave_0: entered promiscuous mode [ 113.751956][ T5939] bond_slave_1: entered promiscuous mode [ 113.758871][ T5939] dummy0: entered promiscuous mode [ 113.764584][ T5939] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 113.774549][ T5939] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 113.784784][ T5939] hsr1: entered promiscuous mode [ 113.789743][ T5939] hsr1: entered allmulticast mode [ 113.794836][ T5939] bond0: entered allmulticast mode [ 113.800075][ T5939] bond_slave_0: entered allmulticast mode [ 113.805858][ T5939] bond_slave_1: entered allmulticast mode [ 113.807689][ T5944] hub 8-0:1.0: USB hub found [ 113.811834][ T5939] dummy0: entered allmulticast mode [ 113.822763][ T5944] hub 8-0:1.0: 8 ports detected [ 113.835396][ T5941] tipc: Enabled bearer , priority 0 [ 113.849327][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.871867][ T5947] siw: device registration error -23 [ 113.904748][ T5952] siw: device registration error -23 [ 113.905258][ T5950] usb usb1: usbfs: process 5950 (syz.2.549) did not claim interface 0 before use [ 113.947769][ T5955] syzkaller0: entered promiscuous mode [ 113.954372][ T5955] syzkaller0: entered allmulticast mode [ 113.967713][ T5940] tipc: Disabling bearer [ 113.973532][ T5957] loop2: detected capacity change from 0 to 1024 [ 113.979484][ T5955] xt_SECMARK: invalid mode: 2 [ 114.021420][ T1051] tipc: Node number set to 2437130229 [ 114.129499][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.200763][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 114.236314][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.274548][ T5979] loop4: detected capacity change from 0 to 512 [ 114.288557][ T5979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.291241][ T5983] siw: device registration error -23 [ 114.296366][ T5979] EXT4-fs: Ignoring removed bh option [ 114.337483][ T5979] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 114.362734][ T5991] siw: device registration error -23 [ 114.368139][ T5979] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.561: corrupted inode contents [ 114.383995][ T5982] netlink: 'syz.0.562': attribute type 3 has an invalid length. [ 114.391841][ T5982] netlink: 'syz.0.562': attribute type 3 has an invalid length. [ 114.417630][ T5979] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.561: mark_inode_dirty error [ 114.440745][ T5979] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.561: invalid indirect mapped block 1 (level 1) [ 114.457206][ T5979] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.561: corrupted inode contents [ 114.484301][ T5979] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 114.520605][ T5979] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.561: corrupted inode contents [ 114.569622][ T5979] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.561: mark_inode_dirty error [ 114.604641][ T5979] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 114.626605][ T5979] EXT4-fs (loop4): 1 truncate cleaned up [ 114.658792][ T5979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.696919][ T5979] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.561: path /122/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 114.957910][ T5979] netlink: 'syz.4.561': attribute type 3 has an invalid length. [ 114.989932][ T5979] netlink: 'syz.4.561': attribute type 3 has an invalid length. [ 115.000517][ T29] kauditd_printk_skb: 10847 callbacks suppressed [ 115.000530][ T29] audit: type=1326 audit(114.983:80102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dd2686567 code=0x7ffc0000 [ 115.031692][ T29] audit: type=1326 audit(114.983:80103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dd262b789 code=0x7ffc0000 [ 115.054494][ T29] audit: type=1326 audit(114.983:80104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dd2686567 code=0x7ffc0000 [ 115.077303][ T29] audit: type=1326 audit(114.983:80105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dd262b789 code=0x7ffc0000 [ 115.100119][ T29] audit: type=1326 audit(114.983:80106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dd2686567 code=0x7ffc0000 [ 115.122860][ T29] audit: type=1326 audit(114.983:80107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dd262b789 code=0x7ffc0000 [ 115.145694][ T29] audit: type=1326 audit(114.983:80108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dd2686567 code=0x7ffc0000 [ 115.168457][ T29] audit: type=1326 audit(114.983:80109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dd262b789 code=0x7ffc0000 [ 115.191166][ T29] audit: type=1326 audit(114.983:80110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4dd2686567 code=0x7ffc0000 [ 115.213866][ T29] audit: type=1326 audit(114.983:80111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5970 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4dd262b789 code=0x7ffc0000 [ 115.339420][ T6005] loop1: detected capacity change from 0 to 512 [ 115.342903][ T6004] siw: device registration error -23 [ 115.369643][ T6005] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.388150][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.408598][ T6002] hub 8-0:1.0: USB hub found [ 115.413569][ T6002] hub 8-0:1.0: 8 ports detected [ 115.419930][ T6005] EXT4-fs (loop1): 1 truncate cleaned up [ 115.434956][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.499845][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 115.552891][ T6015] vlan2: entered allmulticast mode [ 115.787023][ T6023] loop3: detected capacity change from 0 to 512 [ 115.839887][ T6023] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.975603][ T6023] EXT4-fs (loop3): mount failed [ 116.181034][ T6017] Set syz1 is full, maxelem 65536 reached [ 116.308505][ T6036] loop3: detected capacity change from 0 to 512 [ 116.332091][ T6036] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.424601][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.483298][ T6046] loop4: detected capacity change from 0 to 512 [ 116.495974][ T6048] loop1: detected capacity change from 0 to 512 [ 116.496252][ T6048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.496273][ T6048] EXT4-fs: Ignoring removed bh option [ 116.498991][ T6034] tipc: Enabled bearer , priority 0 [ 116.517856][ T6048] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 116.537162][ T6046] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.538769][ T6048] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.575: corrupted inode contents [ 116.544757][ T6046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, [ 116.549677][ T6048] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.575: mark_inode_dirty error [ 116.560415][ T6046] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 116.570486][ T6046] EXT4-fs (loop4): 1 truncate cleaned up [ 116.584681][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 116.619495][ T6046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.642210][ T6033] tipc: Disabling bearer [ 116.643277][ T6048] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.575: invalid indirect mapped block 1 (level 1) [ 116.647906][ T6048] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.575: corrupted inode contents [ 116.648696][ T6048] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 116.652491][ T6048] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.575: corrupted inode contents [ 116.653097][ T6048] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.575: mark_inode_dirty error [ 116.653596][ T6048] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 116.655206][ T6048] EXT4-fs (loop1): 1 truncate cleaned up [ 116.655639][ T6048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.671033][ T6048] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.575: path /113/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 116.819535][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.987664][ T6066] loop4: detected capacity change from 0 to 512 [ 116.996178][ T6066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.996203][ T6066] EXT4-fs: Ignoring removed bh option [ 117.014658][ T6066] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.014716][ T6066] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.581: corrupted inode contents [ 117.014932][ T6066] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.581: mark_inode_dirty error [ 117.015323][ T6066] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.581: invalid indirect mapped block 1 (level 1) [ 117.016303][ T6066] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.581: corrupted inode contents [ 117.016427][ T6066] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 117.016689][ T6066] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.581: corrupted inode contents [ 117.016897][ T6066] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.581: mark_inode_dirty error [ 117.020213][ T6066] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 117.020443][ T6066] EXT4-fs (loop4): 1 truncate cleaned up [ 117.020850][ T6066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.021844][ T6066] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.581: path /127/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 117.347133][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.524446][ T6074] loop1: detected capacity change from 0 to 512 [ 117.539063][ T6074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.539168][ T6074] EXT4-fs: Ignoring removed bh option [ 117.601330][ T6074] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 117.601462][ T6074] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.583: corrupted inode contents [ 117.606534][ T6074] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.583: mark_inode_dirty error [ 117.609285][ T6074] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.583: invalid indirect mapped block 1 (level 1) [ 117.610003][ T6074] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.583: corrupted inode contents [ 117.610934][ T6074] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 117.611557][ T6074] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.583: corrupted inode contents [ 117.612842][ T6074] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.583: mark_inode_dirty error [ 117.613262][ T6074] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 117.613471][ T6074] EXT4-fs (loop1): 1 truncate cleaned up [ 117.613914][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.616696][ T6074] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.583: path /115/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 117.763594][ T6078] loop2: detected capacity change from 0 to 512 [ 117.767164][ T6078] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.767179][ T6078] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 117.778200][ T6078] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 117.778232][ T6078] System zones: 0-2, 18-18, 34-35 [ 117.778922][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 117.801118][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.887187][ T6074] validate_nla: 4 callbacks suppressed [ 117.887221][ T6074] netlink: 'syz.1.583': attribute type 3 has an invalid length. [ 117.887252][ T6074] netlink: 'syz.1.583': attribute type 3 has an invalid length. [ 117.994221][ T6082] loop4: detected capacity change from 0 to 2048 [ 118.044759][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.586'. [ 118.104188][ T3314] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 118.124333][ T3314] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 118.163705][ T6092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6092 comm=syz.0.589 [ 118.203101][ T6099] netlink: 'syz.3.591': attribute type 6 has an invalid length. [ 118.203448][ T6099] netlink: 'syz.3.591': attribute type 6 has an invalid length. [ 118.203800][ T6099] tipc: New replicast peer: 255.255.255.83 [ 118.203882][ T6099] tipc: Enabled bearer , priority 10 [ 118.206624][ T6100] loop4: detected capacity change from 0 to 512 [ 118.246816][ T6100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.261895][ T6100] EXT4-fs (loop4): 1 truncate cleaned up [ 118.341558][ T6097] tipc: Enabled bearer , priority 0 [ 118.446644][ T6096] tipc: Disabling bearer [ 118.454912][ T6108] loop1: detected capacity change from 0 to 512 [ 118.457756][ T6108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.469466][ T6108] EXT4-fs: Ignoring removed bh option [ 118.496328][ T6108] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 118.496381][ T6108] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.594: corrupted inode contents [ 118.496679][ T6108] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.594: mark_inode_dirty error [ 118.496899][ T6108] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.594: invalid indirect mapped block 1 (level 1) [ 118.497114][ T6108] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.594: corrupted inode contents [ 118.497343][ T6108] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 118.497505][ T6108] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.594: corrupted inode contents [ 118.497665][ T6108] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.594: mark_inode_dirty error [ 118.497797][ T6108] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 118.497952][ T6108] EXT4-fs (loop1): 1 truncate cleaned up [ 118.501529][ T6108] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.594: path /117/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 118.558301][ T6111] siw: device registration error -23 [ 118.664603][ T6117] loop2: detected capacity change from 0 to 512 [ 118.669373][ T6108] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 118.681825][ T6117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.694890][ T6108] netlink: 'syz.1.594': attribute type 3 has an invalid length. [ 118.701043][ T6117] EXT4-fs: Ignoring removed bh option [ 118.779836][ T6117] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 118.780046][ T6117] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.597: corrupted inode contents [ 118.781229][ T6117] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.597: mark_inode_dirty error [ 118.781496][ T6117] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.597: invalid indirect mapped block 1 (level 1) [ 118.781681][ T6117] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.597: corrupted inode contents [ 118.781815][ T6117] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 118.781990][ T6117] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.597: corrupted inode contents [ 118.782103][ T6117] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.597: mark_inode_dirty error [ 118.782234][ T6117] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 118.782505][ T6117] EXT4-fs (loop2): 1 truncate cleaned up [ 118.904974][ T6117] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.597: path /110/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 119.023388][ T6117] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 119.023464][ T6117] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 119.321293][ T1051] tipc: Node number set to 3079438776 [ 119.384467][ T6133] loop1: detected capacity change from 0 to 2048 [ 119.581211][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.600'. [ 119.743660][ T3317] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 119.744096][ T3317] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 119.764413][ T6140] loop2: detected capacity change from 0 to 512 [ 119.765283][ T6140] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.765437][ T6140] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 120.015942][ T29] kauditd_printk_skb: 7423 callbacks suppressed [ 120.015958][ T29] audit: type=1326 audit(119.993:87534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 120.015981][ T29] audit: type=1326 audit(119.993:87535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 120.016051][ T29] audit: type=1326 audit(119.993:87536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 120.016584][ T29] audit: type=1326 audit(119.993:87537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 120.016694][ T29] audit: type=1326 audit(119.993:87538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 120.016719][ T29] audit: type=1326 audit(119.993:87539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 120.017922][ T29] audit: type=1326 audit(119.993:87540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 120.017945][ T29] audit: type=1326 audit(119.993:87541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 120.018004][ T29] audit: type=1326 audit(119.993:87542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 120.018029][ T29] audit: type=1326 audit(119.993:87543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.3.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 120.633162][ T6160] loop2: detected capacity change from 0 to 512 [ 120.654875][ T6160] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.654897][ T6160] EXT4-fs: Ignoring removed bh option [ 120.669051][ T6160] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 120.669104][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.603: corrupted inode contents [ 120.669384][ T6160] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.603: mark_inode_dirty error [ 120.669521][ T6160] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.603: invalid indirect mapped block 1 (level 1) [ 120.670591][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.603: corrupted inode contents [ 120.670800][ T6160] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 120.670906][ T6160] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.603: corrupted inode contents [ 120.671231][ T6160] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.603: mark_inode_dirty error [ 120.671372][ T6160] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 120.671468][ T6160] EXT4-fs (loop2): 1 truncate cleaned up [ 120.682760][ T6160] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.603: path /112/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 121.328670][ T6174] xt_SECMARK: invalid mode: 2 [ 121.335804][ T6173] syzkaller0: entered promiscuous mode [ 121.342251][ T6173] syzkaller0: entered allmulticast mode [ 121.381574][ T6174] loop4: detected capacity change from 0 to 1024 [ 121.403030][ T6160] netlink: 'syz.2.603': attribute type 3 has an invalid length. [ 121.441484][ T6160] netlink: 'syz.2.603': attribute type 3 has an invalid length. [ 121.506258][ T6168] tipc: Enabled bearer , priority 0 [ 121.561569][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 121.572116][ T6181] hsr_slave_0: left promiscuous mode [ 121.577956][ T6181] hsr_slave_1: left promiscuous mode [ 121.588486][ T6167] tipc: Disabling bearer [ 121.652398][ T6189] loop2: detected capacity change from 0 to 512 [ 121.662532][ T6189] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.692774][ T6192] loop4: detected capacity change from 0 to 512 [ 121.695813][ T6189] EXT4-fs (loop2): 1 truncate cleaned up [ 121.709562][ T6194] loop1: detected capacity change from 0 to 512 [ 121.713028][ T6192] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.723485][ T6192] EXT4-fs: Ignoring removed bh option [ 121.739085][ T6194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.746772][ T6194] EXT4-fs: Ignoring removed bh option [ 121.762250][ T6192] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 121.779637][ T6192] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.613: corrupted inode contents [ 121.795007][ T6194] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 121.815515][ T6194] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.611: corrupted inode contents [ 121.828291][ T6192] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.613: mark_inode_dirty error [ 121.841398][ T6192] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.613: invalid indirect mapped block 1 (level 1) [ 121.854962][ T6194] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.611: mark_inode_dirty error [ 121.868562][ T6194] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.611: invalid indirect mapped block 1 (level 1) [ 121.891188][ T6192] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.613: corrupted inode contents [ 121.911566][ T6192] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 121.931126][ T6194] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.611: corrupted inode contents [ 121.943918][ T6192] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.613: corrupted inode contents [ 121.971224][ T6194] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 121.979914][ T6194] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.611: corrupted inode contents [ 121.992617][ T6192] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.613: mark_inode_dirty error [ 122.021383][ T6192] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 122.031287][ T6194] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.611: mark_inode_dirty error [ 122.063243][ T6192] EXT4-fs (loop4): 1 truncate cleaned up [ 122.073558][ T6194] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 122.111850][ T6192] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.613: path /134/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 122.135205][ T6194] EXT4-fs (loop1): 1 truncate cleaned up [ 122.175557][ T6194] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.611: path /123/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 122.716104][ T4108] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.798682][ T6205] loop4: detected capacity change from 0 to 512 [ 122.855386][ T6205] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.865401][ T6205] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 122.938257][ T6205] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 122.964288][ T6210] loop1: detected capacity change from 0 to 512 [ 122.982776][ T6205] System zones: 0-2, 18-18, 34-35 [ 123.016613][ T6210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.024172][ T6210] EXT4-fs: Ignoring removed bh option [ 123.056016][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 123.094407][ T6210] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.154371][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.627: corrupted inode contents [ 123.172554][ T6217] siw: device registration error -23 [ 123.191623][ T6210] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.627: mark_inode_dirty error [ 123.213003][ T6210] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.627: invalid indirect mapped block 1 (level 1) [ 123.234897][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.627: corrupted inode contents [ 123.247751][ T6210] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 123.257873][ T6210] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.627: corrupted inode contents [ 123.271101][ T6210] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.627: mark_inode_dirty error [ 123.283472][ T6210] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 123.293516][ T6210] EXT4-fs (loop1): 1 truncate cleaned up [ 123.301848][ T6210] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.627: path /124/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 123.366599][ T6210] validate_nla: 4 callbacks suppressed [ 123.366611][ T6210] netlink: 'syz.1.627': attribute type 3 has an invalid length. [ 123.381426][ T6210] netlink: 'syz.1.627': attribute type 3 has an invalid length. [ 123.796184][ T6229] siw: device registration error -23 [ 123.803552][ T6230] siw: device registration error -23 [ 123.812267][ T6231] loop3: detected capacity change from 0 to 512 [ 123.826848][ T6235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6235 comm=syz.1.618 [ 123.832179][ T6231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.846784][ T6231] EXT4-fs: Ignoring removed bh option [ 123.873495][ T6231] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.875966][ T6238] siw: device registration error -23 [ 123.888534][ T6231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.632: corrupted inode contents [ 123.888690][ T6231] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.632: mark_inode_dirty error [ 123.888808][ T6231] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.632: invalid indirect mapped block 1 (level 1) [ 123.889018][ T6231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.632: corrupted inode contents [ 123.907469][ T6240] loop2: detected capacity change from 0 to 512 [ 123.907795][ T6240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.907813][ T6240] EXT4-fs: Ignoring removed bh option [ 123.965998][ T6240] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 123.982768][ T6240] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.623: corrupted inode contents [ 123.983259][ T6231] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 124.011888][ T6231] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.632: corrupted inode contents [ 124.024871][ T6231] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.632: mark_inode_dirty error [ 124.031273][ T6240] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.623: mark_inode_dirty error [ 124.048487][ T6231] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 124.061873][ T6240] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.623: invalid indirect mapped block 1 (level 1) [ 124.062047][ T6231] EXT4-fs (loop3): 1 truncate cleaned up [ 124.091775][ T6240] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.623: corrupted inode contents [ 124.091858][ T6240] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 124.092000][ T6240] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.623: corrupted inode contents [ 124.092149][ T6240] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.623: mark_inode_dirty error [ 124.145001][ T6231] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.632: path /118/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 124.221889][ T6240] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 124.235297][ T6231] netlink: 'syz.3.632': attribute type 3 has an invalid length. [ 124.235347][ T6231] netlink: 'syz.3.632': attribute type 3 has an invalid length. [ 124.236316][ T6240] EXT4-fs (loop2): 1 truncate cleaned up [ 124.265995][ T6240] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.623: path /116/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 124.317751][ T6240] netlink: 'syz.2.623': attribute type 3 has an invalid length. [ 124.317844][ T6240] netlink: 'syz.2.623': attribute type 3 has an invalid length. [ 124.672161][ T6252] siw: device registration error -23 [ 124.744787][ T6259] loop2: detected capacity change from 0 to 512 [ 124.745034][ T6259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.745055][ T6259] EXT4-fs: Ignoring removed bh option [ 124.757803][ T6259] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 124.757852][ T6259] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.626: corrupted inode contents [ 124.760050][ T6259] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.626: mark_inode_dirty error [ 124.761379][ T6259] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.626: invalid indirect mapped block 1 (level 1) [ 124.761564][ T6259] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.626: corrupted inode contents [ 124.761719][ T6259] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 124.761877][ T6259] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.626: corrupted inode contents [ 124.762010][ T6259] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.626: mark_inode_dirty error [ 124.762118][ T6259] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 124.762213][ T6259] EXT4-fs (loop2): 1 truncate cleaned up [ 124.764451][ T6259] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.626: path /117/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 124.771296][ T4125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.882127][ T6259] netlink: 'syz.2.626': attribute type 3 has an invalid length. [ 124.882169][ T6259] netlink: 'syz.2.626': attribute type 3 has an invalid length. [ 124.942155][ T6257] tipc: Enabled bearer , priority 0 [ 125.035393][ T29] kauditd_printk_skb: 8628 callbacks suppressed [ 125.035408][ T29] audit: type=1326 audit(124.973:96169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 125.066379][ T29] audit: type=1326 audit(125.013:96170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 125.090080][ T29] audit: type=1326 audit(125.013:96171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 125.114858][ T29] audit: type=1326 audit(125.013:96172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 125.138641][ T29] audit: type=1326 audit(125.013:96173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 125.162370][ T29] audit: type=1326 audit(125.013:96174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 125.185252][ T29] audit: type=1326 audit(125.013:96175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 125.207957][ T29] audit: type=1326 audit(125.013:96176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 125.231642][ T29] audit: type=1326 audit(125.013:96177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 125.255390][ T29] audit: type=1326 audit(125.013:96178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 125.284722][ T6256] tipc: Disabling bearer [ 125.431632][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'. [ 125.445412][ T6271] hsr_slave_0: left promiscuous mode [ 125.457547][ T6271] hsr_slave_1: left promiscuous mode [ 125.608884][ T6284] netlink: 'syz.1.634': attribute type 6 has an invalid length. [ 125.623412][ T6284] netlink: 'syz.1.634': attribute type 6 has an invalid length. [ 125.625353][ T6284] tipc: New replicast peer: 255.255.255.83 [ 125.625390][ T6284] tipc: Enabled bearer , priority 10 [ 125.703241][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'. [ 125.787482][ T6286] loop2: detected capacity change from 0 to 512 [ 125.801460][ T6286] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.636: inode #0: comm syz.2.636: iget: illegal inode # [ 125.803265][ T6286] EXT4-fs (loop2): get orphan inode failed [ 125.915462][ T6291] siw: device registration error -23 [ 126.163919][ T6286] EXT4-fs (loop2): mount failed [ 126.266912][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 126.331631][ T6296] siw: device registration error -23 [ 126.493583][ T6303] loop3: detected capacity change from 0 to 512 [ 126.517003][ T6303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.524766][ T6303] EXT4-fs: Ignoring removed bh option [ 126.563955][ T6303] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 126.579743][ T6303] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.641: corrupted inode contents [ 126.592720][ T6303] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.641: mark_inode_dirty error [ 126.605469][ T6303] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.641: invalid indirect mapped block 1 (level 1) [ 126.619685][ T6303] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.641: corrupted inode contents [ 126.632829][ T6303] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 126.642987][ T6303] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.641: corrupted inode contents [ 126.661425][ T6303] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.641: mark_inode_dirty error [ 126.675401][ T6303] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 126.695500][ T6303] EXT4-fs (loop3): 1 truncate cleaned up [ 126.707263][ T6303] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.641: path /122/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 126.709260][ T6311] bond1: entered promiscuous mode [ 126.735751][ T6311] bond1: entered allmulticast mode [ 126.742442][ T3426] tipc: Node number set to 2993508264 [ 126.776094][ T6307] tipc: Enabled bearer , priority 0 [ 126.830154][ T6305] tipc: Disabling bearer [ 126.859367][ T6317] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.891348][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.646'. [ 126.964857][ T6324] loop4: detected capacity change from 0 to 512 [ 126.968739][ T6324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.968760][ T6324] EXT4-fs: Ignoring removed bh option [ 126.970046][ T6324] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 126.970093][ T6324] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.647: corrupted inode contents [ 126.971488][ T6324] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.647: mark_inode_dirty error [ 126.971704][ T6324] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.647: invalid indirect mapped block 1 (level 1) [ 126.971872][ T6324] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.647: corrupted inode contents [ 127.142396][ T6324] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 127.142584][ T6324] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.647: corrupted inode contents [ 127.142675][ T6324] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.647: mark_inode_dirty error [ 127.142818][ T6324] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 127.142957][ T6324] EXT4-fs (loop4): 1 truncate cleaned up [ 127.149114][ T6324] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.647: path /138/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 128.151485][ T6330] siw: device registration error -23 [ 128.178332][ T6338] loop1: detected capacity change from 0 to 512 [ 128.184826][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 128.200660][ T6338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.207319][ T6338] EXT4-fs: Ignoring removed bh option [ 128.213804][ T6332] hsr_slave_0: left promiscuous mode [ 128.224076][ T6332] hsr_slave_1: left promiscuous mode [ 128.249730][ T6338] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 128.272116][ T6338] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.659: corrupted inode contents [ 128.285829][ T6338] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.659: mark_inode_dirty error [ 128.286103][ T6338] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.659: invalid indirect mapped block 1 (level 1) [ 128.350401][ T6338] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.659: corrupted inode contents [ 128.350503][ T6338] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 128.350626][ T6338] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.659: corrupted inode contents [ 128.350766][ T6338] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.659: mark_inode_dirty error [ 128.350850][ T6338] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 128.350963][ T6338] EXT4-fs (loop1): 1 truncate cleaned up [ 128.367221][ T6338] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.659: path /130/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 128.442382][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 128.516842][ T6338] validate_nla: 9 callbacks suppressed [ 128.516859][ T6338] netlink: 'syz.1.659': attribute type 3 has an invalid length. [ 128.532372][ T6338] netlink: 'syz.1.659': attribute type 3 has an invalid length. [ 128.552994][ T6355] siw: device registration error -23 [ 129.858911][ T6372] loop1: detected capacity change from 0 to 512 [ 129.873999][ T6373] loop4: detected capacity change from 0 to 512 [ 129.888631][ T6372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.896437][ T6372] EXT4-fs: Ignoring removed bh option [ 129.909611][ T6373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.916503][ T6373] EXT4-fs: Ignoring removed bh option [ 129.954134][ T6372] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 129.991516][ T6373] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 130.022071][ T6372] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.668: corrupted inode contents [ 130.037185][ T6373] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.656: corrupted inode contents [ 130.051515][ T29] kauditd_printk_skb: 7646 callbacks suppressed [ 130.051529][ T29] audit: type=1326 audit(130.033:103825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 130.081324][ T6373] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.656: mark_inode_dirty error [ 130.081436][ T6372] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.668: mark_inode_dirty error [ 130.088482][ T6372] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.668: invalid indirect mapped block 1 (level 1) [ 130.094041][ T29] audit: type=1326 audit(130.063:103826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 130.107017][ T6373] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.656: invalid indirect mapped block 1 (level 1) [ 130.120030][ T29] audit: type=1326 audit(130.063:103827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 130.120136][ T29] audit: type=1326 audit(130.063:103828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 130.151209][ T6372] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.668: corrupted inode contents [ 130.157031][ T29] audit: type=1326 audit(130.063:103829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 130.206515][ T6373] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.656: corrupted inode contents [ 130.215291][ T29] audit: type=1326 audit(130.063:103830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 130.215323][ T29] audit: type=1326 audit(130.063:103831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 130.215346][ T29] audit: type=1326 audit(130.063:103832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 130.262447][ T6372] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 130.275686][ T29] audit: type=1326 audit(130.063:103833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 130.275715][ T29] audit: type=1326 audit(130.063:103834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.3.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 130.319930][ T6373] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 130.393178][ T6373] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.656: corrupted inode contents [ 130.395470][ T6372] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.668: corrupted inode contents [ 130.406787][ T6373] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.656: mark_inode_dirty error [ 130.431691][ T6378] tipc: Enabled bearer , priority 0 [ 130.457207][ T6372] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.668: mark_inode_dirty error [ 130.481638][ T6372] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 130.513055][ T6373] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 130.523779][ T6372] EXT4-fs (loop1): 1 truncate cleaned up [ 130.534104][ T6373] EXT4-fs (loop4): 1 truncate cleaned up [ 130.539957][ T6388] loop3: detected capacity change from 0 to 512 [ 130.541233][ T6373] EXT4-fs mount: 38 callbacks suppressed [ 130.541246][ T6373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.550993][ T6372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.578562][ T6373] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.656: path /140/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 130.611754][ T6377] tipc: Disabling bearer [ 130.627786][ T6388] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.662: inode #0: comm syz.3.662: iget: illegal inode # [ 130.651900][ T6372] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.668: path /131/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 130.673244][ T6388] EXT4-fs (loop3): get orphan inode failed [ 130.673394][ T6388] EXT4-fs (loop3): mount failed [ 130.724928][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 130.783734][ T6395] siw: device registration error -23 [ 130.829088][ T6373] netlink: 'syz.4.656': attribute type 3 has an invalid length. [ 130.858184][ T6373] netlink: 'syz.4.656': attribute type 3 has an invalid length. [ 130.874752][ T6372] netlink: 'syz.1.668': attribute type 3 has an invalid length. [ 130.884508][ T6372] netlink: 'syz.1.668': attribute type 3 has an invalid length. [ 130.898707][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 130.922726][ T6397] sd 0:0:1:0: device reset [ 131.012534][ T6406] siw: device registration error -23 [ 131.059359][ T6410] loop2: detected capacity change from 0 to 512 [ 131.079184][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.091785][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.102123][ T6410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.108734][ T6410] EXT4-fs: Ignoring removed bh option [ 131.146476][ T6410] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 131.146596][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.670: corrupted inode contents [ 131.146851][ T6410] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #11: comm syz.2.670: mark_inode_dirty error [ 131.147057][ T6410] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.670: invalid indirect mapped block 1 (level 1) [ 131.147245][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.670: corrupted inode contents [ 131.147359][ T6410] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 131.147526][ T6410] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #11: comm syz.2.670: corrupted inode contents [ 131.147714][ T6410] EXT4-fs error (device loop2): ext4_truncate:4637: inode #11: comm syz.2.670: mark_inode_dirty error [ 131.147809][ T6410] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 131.147919][ T6410] EXT4-fs (loop2): 1 truncate cleaned up [ 131.151680][ T6410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.158805][ T6410] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.670: path /128/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 131.729057][ T6410] netlink: 'syz.2.670': attribute type 3 has an invalid length. [ 131.729209][ T6410] netlink: 'syz.2.670': attribute type 3 has an invalid length. [ 132.138025][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.254787][ T6430] loop1: detected capacity change from 0 to 164 [ 132.272142][ T6430] iso9660: Unknown parameter 'net/anycast6' [ 132.323193][ T6430] siw: device registration error -23 [ 132.334682][ T6436] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 132.375118][ T6439] loop1: detected capacity change from 0 to 128 [ 132.615267][ T6443] netlink: 176 bytes leftover after parsing attributes in process `syz.1.676'. [ 132.816319][ T6445] siw: device registration error -23 [ 132.946089][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 133.016981][ T6461] loop3: detected capacity change from 0 to 512 [ 133.029189][ T6459] bond1: left promiscuous mode [ 133.056317][ T6461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.064090][ T6461] EXT4-fs: Ignoring removed bh option [ 133.113097][ T6461] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 133.169496][ T6466] loop1: detected capacity change from 0 to 512 [ 133.207069][ T6448] tipc: Enabled bearer , priority 0 [ 133.211917][ T6461] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.682: corrupted inode contents [ 133.227741][ T6466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.234560][ T6466] EXT4-fs: Ignoring removed bh option [ 133.277808][ T6461] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.682: mark_inode_dirty error [ 133.295600][ T6447] tipc: Disabling bearer [ 133.302389][ T6466] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 133.331208][ T6466] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.683: corrupted inode contents [ 133.406725][ T6466] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #11: comm syz.1.683: mark_inode_dirty error [ 133.454924][ T6461] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.682: invalid indirect mapped block 1 (level 1) [ 133.501625][ T6466] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.683: invalid indirect mapped block 1 (level 1) [ 133.651356][ T6461] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.682: corrupted inode contents [ 133.677343][ T6461] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 133.824630][ T6461] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.682: corrupted inode contents [ 133.825219][ T6461] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.682: mark_inode_dirty error [ 133.826763][ T6461] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 133.827238][ T6461] EXT4-fs (loop3): 1 truncate cleaned up [ 133.836150][ T6461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.890326][ T6461] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.682: path /130/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 133.924050][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 134.475018][ T6466] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.683: corrupted inode contents [ 134.491212][ T6466] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 134.492004][ T6466] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #11: comm syz.1.683: corrupted inode contents [ 134.501341][ T6466] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.683: mark_inode_dirty error [ 134.502321][ T6466] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 134.503037][ T6461] netlink: 'syz.3.682': attribute type 3 has an invalid length. [ 134.503135][ T6461] netlink: 'syz.3.682': attribute type 3 has an invalid length. [ 134.503567][ T6466] EXT4-fs (loop1): 1 truncate cleaned up [ 134.503963][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.505223][ T6466] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.683: path /137/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 134.585941][ T6494] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.667110][ T6466] netlink: 'syz.1.683': attribute type 3 has an invalid length. [ 134.763011][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.881274][ T6466] netlink: 'syz.1.683': attribute type 3 has an invalid length. [ 135.044472][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.065022][ T29] kauditd_printk_skb: 3266 callbacks suppressed [ 135.065038][ T29] audit: type=1326 audit(135.043:107101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6505 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f79199df6c9 code=0x7ffc0000 [ 135.096247][ T29] audit: type=1326 audit(135.043:107102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 135.121317][ T29] audit: type=1326 audit(135.043:107103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 135.145218][ T29] audit: type=1326 audit(135.043:107104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 135.168149][ T29] audit: type=1326 audit(135.043:107105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 135.192022][ T29] audit: type=1326 audit(135.043:107106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 135.215786][ T29] audit: type=1326 audit(135.043:107107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 135.239524][ T29] audit: type=1326 audit(135.043:107108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 135.262351][ T29] audit: type=1326 audit(135.043:107109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f791997b789 code=0x7ffc0000 [ 135.286151][ T29] audit: type=1326 audit(135.043:107110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6501 comm="syz.3.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f79199d6567 code=0x7ffc0000 [ 135.629854][ T6520] SELinux: policydb version 4376 does not match my version range 15-35 [ 135.653158][ T6517] netlink: 176 bytes leftover after parsing attributes in process `syz.0.692'. [ 135.683566][ T6523] netlink: 172 bytes leftover after parsing attributes in process `syz.1.694'. [ 135.693878][ T6520] SELinux: failed to load policy [ 135.712622][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.695'. [ 135.813201][ T6529] siw: device registration error -23 [ 136.662636][ T6546] loop4: detected capacity change from 0 to 512 [ 136.695775][ T6546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.703623][ T6546] EXT4-fs: Ignoring removed bh option [ 136.797756][ T6546] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 136.887482][ T6546] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.700: corrupted inode contents [ 136.993358][ T6546] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #11: comm syz.4.700: mark_inode_dirty error [ 137.077373][ T6546] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.700: invalid indirect mapped block 1 (level 1) [ 137.221241][ T6546] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.700: corrupted inode contents [ 137.262665][ T6554] siw: device registration error -23 [ 137.316773][ T6546] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 137.361296][ T6546] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #11: comm syz.4.700: corrupted inode contents [ 137.401790][ T6552] netlink: 88 bytes leftover after parsing attributes in process `syz.2.701'. [ 137.438968][ T6546] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.700: mark_inode_dirty error [ 137.470219][ T6546] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 137.479387][ T6546] EXT4-fs (loop4): 1 truncate cleaned up [ 137.496332][ T6546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.548192][ T6544] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.700: path /145/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 137.871614][ T6544] netlink: 'syz.4.700': attribute type 3 has an invalid length. [ 137.936561][ T6544] netlink: 'syz.4.700': attribute type 3 has an invalid length. [ 137.981525][ T6566] siw: device registration error -23 [ 138.026152][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 138.211674][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.549064][ T6579] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6579 comm=syz.4.707 [ 139.046023][ T6548] Set syz1 is full, maxelem 65536 reached [ 139.106830][ T6587] loop2: detected capacity change from 0 to 128 [ 139.113960][ T6579] loop4: detected capacity change from 0 to 1024 [ 139.142401][ T6579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.254845][ T6587] netlink: 176 bytes leftover after parsing attributes in process `syz.2.708'. [ 139.402655][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.902862][ T6600] ================================================================== [ 139.910962][ T6600] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 139.918789][ T6600] [ 139.921094][ T6600] write to 0xffffea0005750298 of 8 bytes by task 6539 on cpu 0: [ 139.928701][ T6600] __filemap_remove_folio+0x1a5/0x2a0 [ 139.934056][ T6600] filemap_remove_folio+0x6d/0x1d0 [ 139.939145][ T6600] truncate_inode_folio+0x42/0x50 [ 139.944149][ T6600] shmem_undo_range+0x244/0xa80 [ 139.948987][ T6600] shmem_evict_inode+0x134/0x520 [ 139.953915][ T6600] evict+0x2e3/0x550 [ 139.957787][ T6600] iput+0x4ed/0x650 [ 139.961574][ T6600] dentry_unlink_inode+0x24f/0x260 [ 139.966664][ T6600] __dentry_kill+0x18d/0x4b0 [ 139.971236][ T6600] dput+0x5e/0xd0 [ 139.974850][ T6600] __fput+0x444/0x650 [ 139.978807][ T6600] ____fput+0x1c/0x30 [ 139.982774][ T6600] task_work_run+0x131/0x1a0 [ 139.987347][ T6600] do_exit+0x483/0x15c0 [ 139.991488][ T6600] do_group_exit+0xff/0x140 [ 139.995970][ T6600] get_signal+0xe58/0xf70 [ 140.000283][ T6600] arch_do_signal_or_restart+0x96/0x440 [ 140.005895][ T6600] irqentry_exit_to_user_mode+0x5b/0xa0 [ 140.011427][ T6600] irqentry_exit+0x12/0x50 [ 140.015834][ T6600] asm_exc_page_fault+0x26/0x30 [ 140.020664][ T6600] [ 140.022972][ T6600] read to 0xffffea0005750298 of 8 bytes by task 6600 on cpu 1: [ 140.030514][ T6600] folio_mapping+0xa1/0xe0 [ 140.034915][ T6600] evict_folios+0xe05/0x3590 [ 140.039487][ T6600] try_to_shrink_lruvec+0x5b5/0x950 [ 140.044669][ T6600] shrink_lruvec+0x22e/0x1b50 [ 140.049348][ T6600] shrink_node+0x686/0x2120 [ 140.053835][ T6600] do_try_to_free_pages+0x3f6/0xcd0 [ 140.059013][ T6600] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 140.064978][ T6600] try_charge_memcg+0x383/0xa10 [ 140.069808][ T6600] obj_cgroup_charge_pages+0xa6/0x150 [ 140.075158][ T6600] __memcg_kmem_charge_page+0x9f/0x170 [ 140.080594][ T6600] __alloc_frozen_pages_noprof+0x188/0x360 [ 140.086402][ T6600] alloc_pages_mpol+0xb3/0x260 [ 140.091144][ T6600] alloc_pages_noprof+0x90/0x130 [ 140.096060][ T6600] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 140.101864][ T6600] __kvmalloc_node_noprof+0x483/0x670 [ 140.107232][ T6600] ip_set_alloc+0x24/0x30 [ 140.111550][ T6600] hash_netiface_create+0x282/0x740 [ 140.116731][ T6600] ip_set_create+0x3cc/0x970 [ 140.121302][ T6600] nfnetlink_rcv_msg+0x4c6/0x590 [ 140.126229][ T6600] netlink_rcv_skb+0x123/0x220 [ 140.130989][ T6600] nfnetlink_rcv+0x167/0x16c0 [ 140.135649][ T6600] netlink_unicast+0x5c0/0x690 [ 140.140402][ T6600] netlink_sendmsg+0x58b/0x6b0 [ 140.145144][ T6600] __sock_sendmsg+0x145/0x180 [ 140.149803][ T6600] ____sys_sendmsg+0x31e/0x4e0 [ 140.154567][ T6600] ___sys_sendmsg+0x17b/0x1d0 [ 140.159224][ T6600] __x64_sys_sendmsg+0xd4/0x160 [ 140.164053][ T6600] x64_sys_call+0x191e/0x3000 [ 140.168719][ T6600] do_syscall_64+0xd2/0x200 [ 140.173210][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.179080][ T6600] [ 140.181382][ T6600] value changed: 0xffff88811abd5f00 -> 0x0000000000000000 [ 140.188552][ T6600] [ 140.190856][ T6600] Reported by Kernel Concurrency Sanitizer on: [ 140.196994][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.3.719 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 140.208258][ T6600] Tainted: [W]=WARN [ 140.212049][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.222085][ T6600] ================================================================== [ 140.321986][ T29] kauditd_printk_skb: 2230 callbacks suppressed [ 140.322067][ T29] audit: type=1326 audit(140.223:109341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7563a26567 code=0x7ffc0000 [ 140.351292][ T29] audit: type=1326 audit(140.223:109342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75639cb789 code=0x7ffc0000 [ 140.374200][ T29] audit: type=1326 audit(140.223:109343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7563a26567 code=0x7ffc0000 [ 140.398104][ T29] audit: type=1326 audit(140.223:109344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75639cb789 code=0x7ffc0000 [ 140.422058][ T29] audit: type=1326 audit(140.223:109345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7563a26567 code=0x7ffc0000 [ 140.445885][ T29] audit: type=1326 audit(140.223:109346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75639cb789 code=0x7ffc0000 [ 140.469873][ T29] audit: type=1326 audit(140.223:109347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7563a26567 code=0x7ffc0000 [ 140.493734][ T29] audit: type=1326 audit(140.223:109348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75639cb789 code=0x7ffc0000 [ 140.516660][ T29] audit: type=1326 audit(140.223:109349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7563a26567 code=0x7ffc0000 [ 140.540390][ T29] audit: type=1326 audit(140.223:109350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.0.718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f75639cb789 code=0x7ffc0000