last executing test programs: 3.628549562s ago: executing program 4 (id=200): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x10c405, &(0x7f0000003ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=r1, @ANYRES8, @ANYRESHEX, @ANYRES32], 0xff, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={0x0, 0x0, 0x4000}, 0x18) r2 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) pipe(&(0x7f0000000500)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) fsopen(&(0x7f0000000440)='binfmt_misc\x00', 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 3.474561627s ago: executing program 4 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd7000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000003000000ff"], 0x28}}, 0x44) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x1cc, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x1a9, 0x2a, [@measure_req={0x26, 0xfa, {0xf, 0x51, 0x5, "4c2061f32f1eba63f6757e73a07ff2838888d05feea26a6b701273ba0175ba78c0031c46f38af1507b1ca5518fc183e49a28280e29b27ca226fecf972c16005c09273513765da4f6b2f3be48ebcaf2ce975602c7f064052854b19cea4729c8dff60d2f16bf8467bc70cfc924c09b2d65be11cf2a97d18eef3483f2b0572e9071eaaf032dfe8ce4a1ba17f2bfb364ed3554cdb3bd8df51f9eab7cf1107b987993edb947e3fc85750d0e5a5759dfae4fbf5e458b226d79065b09facab391c26c163c2e02427d281daebd4fae747bc4de33bb4231568ce7726a9fbe2856b770053b224e7bfbd1b108b92fe098246b94029055474aec2c0319"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x8e, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x9, @device_a, 0x0, @value=@broadcast, 0xfffffff8, 0x3, 0xa, [{{}, @device_a, 0xbd}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0xd}, {{0x0, 0x0, 0x1}, @device_a, 0x1d}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{}, @device_b, 0xc}, {{0x1, 0x0, 0x1}, @device_b, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_b}, {{0x0, 0x0, 0x1}, @broadcast, 0x100}]}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0xb2, 0x69}}, @cf={0x4, 0x6, {0x4, 0x0, 0x4, 0x9}}]}]}, 0x1cc}}, 0x8010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) unshare(0x600) bpf$LINK_DETACH(0x22, &(0x7f0000000280), 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x12c, r7, 0xfc5, 0x70bd29, 0x4000, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [{{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x1c}, {{}, @device_a, 0x4, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x2a}, {{}, @device_a, 0x7805, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x34}, {{0x0, 0x1}, @device_b, 0x101, @value, 0x19}, {{0x0, 0x1}, @device_b, 0x81, @value, 0x7}, {{0x0, 0x1}, @device_b, 0x2, @value, 0xb}, {{}, @broadcast, 0x100, @void, 0x1e}, {{}, @device_b, 0x40, @void, 0x26}, {{}, @device_a, 0x1, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x12}, {{}, @device_a, 0x1ff, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0xa}, {{}, @device_a, 0x80, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x6, @value, 0xb}]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x3e8, r7, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x5b}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xca7}, @NL80211_ATTR_TX_RATES={0x3a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x4}, {0x4}, {0x4, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {}, {0x7, 0xa}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x5}, {0x6}, {0x0, 0x5}, {0x3, 0x9}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0xbdea, 0x3, 0x8, 0x3, 0x3, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x8, 0xed, 0x8, 0x1, 0x100, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x6, 0x9, 0x1, 0x2, 0x8000, 0xd4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x100, 0x4, 0x10, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0xfffe, 0x6, 0xf76a, 0x1, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x6}, {0x4, 0x3}, {0x4, 0xa}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x2}, {0x3, 0x4}, {0x4}, {0x5, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x9}, {0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x488e, 0x8, 0x2, 0x80, 0x401, 0x101, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc27, 0x1, 0x10, 0xce33, 0x47, 0xb, 0xf, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ed, 0x0, 0xfff7, 0x1, 0x8, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd61b, 0x3ff, 0x7a49, 0x7, 0x10, 0x7ff, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0x56, 0x25d, 0x2, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x180, 0x8, 0x8, 0x8, 0x7, 0x78]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xa5a3, 0x5, 0x1, 0x5, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x18, 0x16, 0x2, 0x9, 0xc, 0xc, 0x36, 0x6, 0x30, 0xb, 0x6, 0x30, 0x24, 0xc, 0xb, 0x1b, 0x48, 0x5, 0xc, 0x60, 0x24, 0x16, 0xaedc18266dd9527, 0x6c, 0x2, 0x60, 0x24, 0x6]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x8}, {0x7, 0x4}, {0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {0x3}, {0x5, 0x9}, {0x5, 0x3}, {0x3}, {0x4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x5, 0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6}, {0x4}, {0x5, 0x7}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x3}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x9}, {0x1}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x3}, {0x5, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x7}, {0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x6}, {0x2}, {0x4, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x1, 0x8}, {0x1}, {0x1}, {0x2, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x24, 0x6, 0x18, 0x6c, 0x6c, 0x6c, 0x18, 0x1b, 0x36, 0x9, 0x2, 0x5, 0x4, 0xc, 0x5, 0x2, 0x0, 0x5, 0x9, 0x1, 0x6c, 0x9, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9, 0x1, 0x6, 0x3ff, 0x81, 0x6, 0x3]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4}, {0x2, 0x6}, {0x7, 0x4}, {0x2, 0x4}, {0x6, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x1}, {0x6, 0x8}, {0x6}, {0x4, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x417, 0x1, 0x1, 0xfffb, 0x8, 0x9, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x5, 0x2, 0xe, 0x2, 0xffff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1, 0x9, 0x8c48, 0x800, 0xc, 0x200]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x7}, {0x4, 0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {}, {0x4, 0x5}, {}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x3}, {0x6, 0x4}, {0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x3, 0x9, 0x9, 0x30, 0x0, 0x2, 0x6c, 0xc, 0x36, 0x24, 0x1b, 0x1, 0x6, 0x30, 0xb, 0xc, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x2}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x5, 0xa}, {}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x1}]}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x400c005}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'gre0\x00', 0x0, 0x40, 0x7, 0x4, 0x3, {{0xf, 0x4, 0x0, 0x13, 0x3c, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0x8, [{@broadcast, 0x6cfe}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x9}, {@remote, 0x6}, {@multicast1}]}, @generic={0xd1ff01d8d281bdc0, 0x4, "c0ab"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x0, 0x8, {{0xe, 0x4, 0x0, 0x3e, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x7, 0x39, [@broadcast]}, @lsrr={0x83, 0x1b, 0xb1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102]}]}}}}}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xd8, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0xc4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x114, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xec0}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x30}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040028bd7000fddbdf2514000000580002801c000380080001000200000008000200faffffff08000200fd0000000800010070a4000008000100aaf600000c000380080001000200000004000400080001003c10ffff04000400040004000800010009000000"], 0x6c}}, 0x4000000) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000d00)={0x5, &(0x7f0000000cc0)=[{0x6, 0x5, 0x3, 0x5}, {0x7170, 0x0, 0x3, 0x8001}, {0x2653, 0x5, 0xf3, 0x8}, {0x7, 0x42, 0xf5, 0x1}, {0x8000, 0xd, 0xd}]}) ioctl$F2FS_IOC_RESIZE_FS(r14, 0x4008f510, &(0x7f0000000d40)=0x6) 3.408165943s ago: executing program 4 (id=208): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa1000, 0x20) getdents64(r1, 0x0, 0x0) 3.24324987s ago: executing program 4 (id=214): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000"], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r3}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x88c, 0x30, 0x937, 0xfffffffc, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x396bad78, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0xffffffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffefffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x80000000, 0x0, 0x100000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x6, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x40, 0x1, 0x3, 0xff, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x17, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x400000, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0xd, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 3.090978515s ago: executing program 4 (id=216): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000920d21663938a9c29c5506c66031d65abe38f7874f15300ff46e8a5020", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$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") 2.886128275s ago: executing program 4 (id=218): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r2, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030"], 0x0, 0x4e, 0x0, 0x1}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r4, 0x1000) ftruncate(r4, 0x4000003) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7bfd}, 0x94) 2.216389871s ago: executing program 2 (id=228): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5452, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 2.143276669s ago: executing program 2 (id=230): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000"], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 2.096360343s ago: executing program 2 (id=233): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000920d21663938a9c29c5506c66031d65abe38f7874f15300ff46e8a5020", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$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") 1.810346201s ago: executing program 2 (id=239): socket$inet6(0xa, 0x1, 0x409) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8804) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210042, 0x0) clock_settime(0x3, 0x0) getpid() epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 1.229953999s ago: executing program 1 (id=247): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)) (async) r3 = syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) io_uring_enter(r3, 0x5b43, 0x0, 0x20, 0x0, 0x0) (async) io_uring_enter(r3, 0x5b43, 0x0, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) 1.031565748s ago: executing program 1 (id=251): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 1.031121578s ago: executing program 1 (id=252): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x340, 0x268, 0x300, 0x230, 0x268, 0x340, 0x460, 0x460, 0x340, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x230, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x1}, {0x1, 0x2, 0x1}, {0x1, 0x2}, 0xfffff3d1, 0x4ab}}}, {{@ipv6={@mcast2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {}, {}, 0x0, 0xfe}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 1.019179899s ago: executing program 1 (id=253): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) io_setup(0x4, &(0x7f0000000440)=0x0) io_pgetevents(r3, 0x76cf47e1, 0x2, &(0x7f0000000480)=[{}, {}], 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={[0x1]}, 0x8}) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa1000, 0x20) getdents64(r4, 0x0, 0x0) 958.167406ms ago: executing program 3 (id=254): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000920d21663938a9c29c5506c66031d65abe38f7874f15300ff46e8a5020", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$eJzs3M2PFEUfAOBfzwe7wMv77ouIgigLaNyYuAsLCgcvmph40MSIBzludleCLGDYPQghsiQGzyTejUfjTROvXo0n/wA8eDAxJMRwATy16Znu2dmZ3o+B/WCd50lmp6q6pququ7qntmu6A+hbw9mfJOI/EXE7Iv7XjC7OMNx8e3Dv2uTDe9cmYz5NT/+VNPLdz+K54nM788hIJaLyRdKxwqbZK1fPT8zMTF/O42NzFz4dm71y9dVzFybOTp+dvjh+6tSJ48dOvj7+Wu+NKikva9f9/Z9fOrDvnTO33pusFemD+Xt7O5ZU660aw8sse6m3VT3xdrWFk+7tdH1DK8Oq1fNunb3fvjZz+MxmVwjYMGmapgNLL55PO93oSgG2rCQ2uwbA5ii+6LP/f4vXBg09ngh332z+A5S1+0H+ai6pRSXPU+/4/3YtDUfER/N/f529YrnrEL+vUwUAgL4zn7+naef4rxJ72/L9N59DGYqI/0fE7oh4KiL2RMTTEY28z0TEs50FJBHpMuXv6YgvlP9DPotQufNYDVxBNv57I5/bWjz+K0Z/MVTNY7uyzdRMmz6ab5ORqA98fG5m+tgS69+2Qvnt47/slZVfjAXzetypdVygm5qYm3i01na7eyNif62z/Ukt23HFNE4S1dgXEft7WO9QW/jcK9/WW5H64nwl7U8WemVLWjKl1/N8XJn0m4iXm/t/Phbt/4USk+XnJ8cGY2b66FjWC46WlvHLrzffX6r8Fff/j390fuTtkz+dftxmt2T7f0db/49i/nah/UNJRNKar52NSKvFotK90uXmb1821jt8pHvZo/b/bcmHjXBxfH02MTd3+VjEtuTd7vTxhc8W8SJ/1v6RI+XH/+62Vj4XEQci4vmIeCEiDuZ1PxQRhyOipGktP7/14idLLVu5/esra/9U6flv0f5fmK9fZaD4cJZSPX/o9sMlTh6r2/8nGqGRPKX8/Jcs6oyrrenjbT0AAADYGirR+O1/ZbQVrlRGR5vXgPbEjsrMpdm5gxFxcap5j8BQ1CvFla7m9eB6Ulz/HGqLj3fEj+fXjb+qbm/ERycvzUxtduOhz+1sHPNJ1/Gf+bO62bUD1t0azKMBW9RKx//eWxtUEWDD+f6H/lVr/JSxoeuXd0W6X8rAv5Pvf+hTO8uTr8d3y9674JwBW1/qWIa+5viH/lWLD1rhxm3Pnfd1nt+x0VUCNojvf+hLvd7X31sgHShfNBglTwwYXJ9qbC8pa1MC2chqDVdYj4jVZd7+KEUUQ8Cln/BQ6W2FA/XuzlaNtpRqZ1lJD89xKALZVlkx89m9a975i2eirHW3+X7hOK23ts+DNE3XvdNuyukIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzf0TAAD//4REzz8=") 887.967712ms ago: executing program 2 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd7000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000003000000ff"], 0x28}}, 0x44) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f0000000c80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a00)={0x1cc, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x1a9, 0x2a, [@measure_req={0x26, 0xfa, {0xf, 0x51, 0x5, "4c2061f32f1eba63f6757e73a07ff2838888d05feea26a6b701273ba0175ba78c0031c46f38af1507b1ca5518fc183e49a28280e29b27ca226fecf972c16005c09273513765da4f6b2f3be48ebcaf2ce975602c7f064052854b19cea4729c8dff60d2f16bf8467bc70cfc924c09b2d65be11cf2a97d18eef3483f2b0572e9071eaaf032dfe8ce4a1ba17f2bfb364ed3554cdb3bd8df51f9eab7cf1107b987993edb947e3fc85750d0e5a5759dfae4fbf5e458b226d79065b09facab391c26c163c2e02427d281daebd4fae747bc4de33bb4231568ce7726a9fbe2856b770053b224e7bfbd1b108b92fe098246b94029055474aec2c0319"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x8e, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x9, @device_a, 0x0, @value=@broadcast, 0xfffffff8, 0x3, 0xa, [{{}, @device_a, 0xbd}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0xd}, {{0x0, 0x0, 0x1}, @device_a, 0x1d}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{}, @device_b, 0xc}, {{0x1, 0x0, 0x1}, @device_b, 0xfffffff7}, {{0x0, 0x0, 0x1}, @device_b}, {{0x0, 0x0, 0x1}, @broadcast, 0x100}]}}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x81, 0xb2, 0x69}}, @cf={0x4, 0x6, {0x4, 0x0, 0x4, 0x9}}]}]}, 0x1cc}}, 0x8010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) unshare(0x600) bpf$LINK_DETACH(0x22, &(0x7f0000000280), 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x12c, r7, 0xfc5, 0x70bd29, 0x4000, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x108, {0x0, 0x10, [{{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x1c}, {{}, @device_a, 0x4, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x2a}, {{}, @device_a, 0x7805, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x34}, {{0x0, 0x1}, @device_b, 0x101, @value, 0x19}, {{0x0, 0x1}, @device_b, 0x81, @value, 0x7}, {{0x0, 0x1}, @device_b, 0x2, @value, 0xb}, {{}, @broadcast, 0x100, @void, 0x1e}, {{}, @device_b, 0x40, @void, 0x26}, {{}, @device_a, 0x1, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x12}, {{}, @device_a, 0x1ff, @void, 0x1b}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0xa}, {{}, @device_a, 0x80, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0x6, @value, 0xb}]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x3e8, r7, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x5b}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xca7}, @NL80211_ATTR_TX_RATES={0x3a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x4}, {0x4}, {0x4, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {}, {0x7, 0xa}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x7, 0x9}, {0x1, 0x8}, {0x6, 0xa}, {0x5, 0x1}, {0x7, 0x1}, {0x6, 0xa}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x9}, {0x7, 0x8}, {0x4, 0x5}, {0x6}, {0x0, 0x5}, {0x3, 0x9}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0xbdea, 0x3, 0x8, 0x3, 0x3, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x8, 0xed, 0x8, 0x1, 0x100, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x6, 0x9, 0x1, 0x2, 0x8000, 0xd4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x100, 0x4, 0x10, 0x0, 0x8, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0xfffe, 0x6, 0xf76a, 0x1, 0x5, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x3}, {0x2, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x1}, {0x0, 0xa}, {0x4, 0x1}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x2}, {0x6}, {0x4, 0x3}, {0x4, 0xa}, {0x3}, {0x1, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x7, 0x7}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x7}, {0x2}, {0x3, 0x4}, {0x4}, {0x5, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x9}, {0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x5}, {0x4, 0x9}, {0x6, 0x8}, {0x7, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x488e, 0x8, 0x2, 0x80, 0x401, 0x101, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc27, 0x1, 0x10, 0xce33, 0x47, 0xb, 0xf, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ed, 0x0, 0xfff7, 0x1, 0x8, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x3}, {0x0, 0xa}, {0x4, 0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd61b, 0x3ff, 0x7a49, 0x7, 0x10, 0x7ff, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x3, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1, 0x56, 0x25d, 0x2, 0x7, 0x8, 0x2]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x180, 0x8, 0x8, 0x8, 0x7, 0x78]}}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xa5a3, 0x5, 0x1, 0x5, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x18, 0x16, 0x2, 0x9, 0xc, 0xc, 0x36, 0x6, 0x30, 0xb, 0x6, 0x30, 0x24, 0xc, 0xb, 0x1b, 0x48, 0x5, 0xc, 0x60, 0x24, 0x16, 0xaedc18266dd9527, 0x6c, 0x2, 0x60, 0x24, 0x6]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x8}, {0x7, 0x4}, {0x1}, {0x3, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {0x3}, {0x5, 0x9}, {0x5, 0x3}, {0x3}, {0x4, 0x4}, {0x4, 0x6}, {0x6, 0x4}, {0x5, 0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x4}, {0x4, 0x4}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x6}, {0x4}, {0x5, 0x7}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x3}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x2, 0x9}, {0x1}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x3}, {0x5, 0x8}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x7}, {0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0x3}, {0x7, 0x6}, {0x2}, {0x4, 0x9}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x1, 0x8}, {0x1}, {0x1}, {0x2, 0x6}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x24, 0x6, 0x18, 0x6c, 0x6c, 0x6c, 0x18, 0x1b, 0x36, 0x9, 0x2, 0x5, 0x4, 0xc, 0x5, 0x2, 0x0, 0x5, 0x9, 0x1, 0x6c, 0x9, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x9, 0x1, 0x6, 0x3ff, 0x81, 0x6, 0x3]}}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x4}, {0x2, 0x6}, {0x7, 0x4}, {0x2, 0x4}, {0x6, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x6, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x4, 0x9}, {0x1}, {0x6, 0x8}, {0x6}, {0x4, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x417, 0x1, 0x1, 0xfffb, 0x8, 0x9, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x5, 0x2, 0xe, 0x2, 0xffff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1, 0x9, 0x8c48, 0x800, 0xc, 0x200]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x1}, {0x2, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x5}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x7}, {0x4, 0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {}, {0x4, 0x5}, {}]}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x3}, {0x6, 0x4}, {0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0x8}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x3, 0x9, 0x9, 0x30, 0x0, 0x2, 0x6c, 0xc, 0x36, 0x24, 0x1b, 0x1, 0x6, 0x30, 0xb, 0xc, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x2}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x8}, {0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x6}, {0x4, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x5, 0xa}, {}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x6}, {0x4, 0x4}, {0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x4}, {}, {0x7, 0x6}, {0x4, 0xa}, {0x0, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x1}]}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x400c005}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'gre0\x00', 0x0, 0x40, 0x7, 0x4, 0x3, {{0xf, 0x4, 0x0, 0x13, 0x3c, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x24, 0xd7, 0x1, 0x8, [{@broadcast, 0x6cfe}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x9}, {@remote, 0x6}, {@multicast1}]}, @generic={0xd1ff01d8d281bdc0, 0x4, "c0ab"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f00)={'syztnl2\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x0, 0x8, {{0xe, 0x4, 0x0, 0x3e, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@rr={0x7, 0x7, 0x39, [@broadcast]}, @lsrr={0x83, 0x1b, 0xb1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102]}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xd8, r9, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfe}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0xc4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x114, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xec0}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x30}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040028bd7000fddbdf2514000000580002801c000380080001000200000008000200faffffff08000200fd0000000800010070a4000008000100aaf600000c000380080001000200000004000400080001003c10ffff04000400040004000800010009000000"], 0x6c}}, 0x4000000) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000d00)={0x5, &(0x7f0000000cc0)=[{0x6, 0x5, 0x3, 0x5}, {0x7170, 0x0, 0x3, 0x8001}, {0x2653, 0x5, 0xf3, 0x8}, {0x7, 0x42, 0xf5, 0x1}, {0x8000, 0xd, 0xd}]}) ioctl$F2FS_IOC_RESIZE_FS(r13, 0x4008f510, &(0x7f0000000d40)=0x6) 848.675766ms ago: executing program 3 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 802.029001ms ago: executing program 3 (id=257): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) unshare(0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 801.445041ms ago: executing program 1 (id=258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) sync_file_range(r0, 0x1, 0x6, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x9, 0x2, 0x9, 0x42}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) 757.607995ms ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="2b63707e20c39522f6598a573371ca4f0ba13f413a5e88b382d1b903c7be096083c672ed7cbb6ef3f96aaeee3ba68f91524ed6dcd7ed388c0e7fc8a6fb3a6f19e60108eba7a1b94339b1e6250260f7397d0203c60ed81f26956c30775d5166f52f849f289e9381ecbac1f108923ef4bdc324f4243a1d7f1da4a392eeb4fee7410f74717cb1e3f244a6c50a5d8c15411348c653b1279b1f7c9ea3414a"], 0x5) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 678.290143ms ago: executing program 1 (id=260): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r4], 0xa) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @any, 0xffff}, 0xe) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0xa10, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000003c0)) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300"], 0x44}}, 0x0) 451.512955ms ago: executing program 0 (id=265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x5452, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 430.153128ms ago: executing program 0 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x200000, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 397.072221ms ago: executing program 0 (id=267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 323.234148ms ago: executing program 0 (id=268): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 322.368769ms ago: executing program 0 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") 201.263851ms ago: executing program 3 (id=270): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 189.287221ms ago: executing program 0 (id=271): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x2, 0x1}, 0x5, 0x82, &(0x7f0000000700)="6ebfd2984dcc34ead998d87e77fc16f893433301e400f1718a461ff743c5254150b37e2d3329acd26785c3e8495626e8690e6a48f4df999ac7f9261608a148cfb38a9061a2be0a048f327ab4dc5a3b2e7a1a2629d4b57322eb7d4b445952b6b1e713f0c82676822028b5de87df85f4cb17e1b44c4aaebbdfb1cde6bfae4d4d544e95b47b7c4d6ca7ec7f7665745b53471ca26542e91975764f558ebb0504e583acf2faa23e0803a323a9ccb9612f30b2e3d2b0ff6af426d15660a88958037de380abef65a92f7cac54b65f477a3e5dfc", 0xd0, 0xffffff7f, 0x8000, 0x9, 0x1, 0x4, &(0x7f0000000600)="ba4cfe664da6785af6d63dff30f4a64af503738c3e3e3d3342ee9b8ae2b8e78a6a60ff5fbf96618ce3148027082ba188e0f873f1260b76c7ef607d358d9ef5c1a0d5793b2c34d9d3b34f91062e504a25f70cbff5ede6159444d00631d6301d280fd88828d8c806a418c4b962641cc09ec91018c682606df0abe2fab30e6b93c7f860e8e3a3b1c6f1b6aaa6fee63954b768b55395c8ea00619a"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_getevents(0x0, 0xff2, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x0) clock_adjtime(0x3, &(0x7f0000000500)={0x2, 0xfffffffffffff8df, 0xc, 0x7, 0x2, 0xb, 0x8001, 0x7, 0x40, 0x6, 0x2e16b9d6, 0x0, 0x0, 0x81, 0xaa, 0x9, 0x1, 0x7, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x6, 0x5, 0x3, 0x7400000000000000, 0xff, 0x8}) io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xceb4, 0x10, 0x103fc, 0x400015d}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x109a88, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c587c7ab18285f7a55d53e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000004c0)='initcall_finish\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[], 0xfd, 0x0, &(0x7f0000000080)) 27.189878ms ago: executing program 3 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 0s ago: executing program 3 (id=273): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) io_setup(0x4, &(0x7f0000000440)=0x0) io_pgetevents(r3, 0x76cf47e1, 0x2, &(0x7f0000000480)=[{}, {}], 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={[0x1]}, 0x8}) close(r2) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa1000, 0x20) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 35.376020][ T29] audit: type=1400 audit(1760485809.607:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.399415][ T29] audit: type=1400 audit(1760485809.627:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.400604][ T3303] cgroup: Unknown subsys name 'net' [ 35.427294][ T29] audit: type=1400 audit(1760485809.657:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.563458][ T3303] cgroup: Unknown subsys name 'cpuset' [ 35.569813][ T3303] cgroup: Unknown subsys name 'rlimit' [ 35.721623][ T29] audit: type=1400 audit(1760485809.947:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.745124][ T29] audit: type=1400 audit(1760485809.957:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.765980][ T29] audit: type=1400 audit(1760485809.957:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.786419][ T29] audit: type=1400 audit(1760485809.957:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.795338][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.806829][ T29] audit: type=1400 audit(1760485809.967:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.841664][ T29] audit: type=1400 audit(1760485809.967:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.854385][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.866668][ T29] audit: type=1400 audit(1760485810.047:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.097023][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 37.182106][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.210455][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 37.286466][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.293810][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.301030][ T3313] bridge_slave_0: entered allmulticast mode [ 37.307615][ T3313] bridge_slave_0: entered promiscuous mode [ 37.319853][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.327041][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.334248][ T3313] bridge_slave_1: entered allmulticast mode [ 37.340649][ T3313] bridge_slave_1: entered promiscuous mode [ 37.371776][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.379009][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.386504][ T3316] bridge_slave_0: entered allmulticast mode [ 37.393090][ T3316] bridge_slave_0: entered promiscuous mode [ 37.402314][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.409520][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.416940][ T3316] bridge_slave_1: entered allmulticast mode [ 37.423575][ T3316] bridge_slave_1: entered promiscuous mode [ 37.430575][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.437919][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.445216][ T3314] bridge_slave_0: entered allmulticast mode [ 37.451664][ T3314] bridge_slave_0: entered promiscuous mode [ 37.467601][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.481593][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.488865][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.496162][ T3314] bridge_slave_1: entered allmulticast mode [ 37.502922][ T3314] bridge_slave_1: entered promiscuous mode [ 37.524583][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.544227][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.554268][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.569034][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.587372][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.602491][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.612319][ T3313] team0: Port device team_slave_0 added [ 37.621045][ T3313] team0: Port device team_slave_1 added [ 37.673107][ T3316] team0: Port device team_slave_0 added [ 37.679366][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.690745][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.697768][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.723945][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.735789][ T3314] team0: Port device team_slave_0 added [ 37.741863][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.749017][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.775135][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.786848][ T3316] team0: Port device team_slave_1 added [ 37.803881][ T3314] team0: Port device team_slave_1 added [ 37.832495][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.839579][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.865711][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.881677][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.888848][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.896035][ T3320] bridge_slave_0: entered allmulticast mode [ 37.902483][ T3320] bridge_slave_0: entered promiscuous mode [ 37.909605][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.917208][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.924533][ T3320] bridge_slave_1: entered allmulticast mode [ 37.931149][ T3320] bridge_slave_1: entered promiscuous mode [ 37.942756][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.949734][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.975677][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.995616][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.002720][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.028944][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.054977][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.061964][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.087980][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.121496][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.141125][ T3313] hsr_slave_0: entered promiscuous mode [ 38.147140][ T3313] hsr_slave_1: entered promiscuous mode [ 38.154291][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.198490][ T3314] hsr_slave_0: entered promiscuous mode [ 38.204826][ T3314] hsr_slave_1: entered promiscuous mode [ 38.210645][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.216440][ T3314] Cannot create hsr debugfs directory [ 38.229150][ T3316] hsr_slave_0: entered promiscuous mode [ 38.235511][ T3316] hsr_slave_1: entered promiscuous mode [ 38.241656][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.247468][ T3316] Cannot create hsr debugfs directory [ 38.284292][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.291410][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.298959][ T3321] bridge_slave_0: entered allmulticast mode [ 38.305497][ T3321] bridge_slave_0: entered promiscuous mode [ 38.312801][ T3320] team0: Port device team_slave_0 added [ 38.328098][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.335377][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.342568][ T3321] bridge_slave_1: entered allmulticast mode [ 38.349122][ T3321] bridge_slave_1: entered promiscuous mode [ 38.355959][ T3320] team0: Port device team_slave_1 added [ 38.377673][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.407681][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.414708][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.440949][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.453176][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.475734][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.482746][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.509088][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.543640][ T3321] team0: Port device team_slave_0 added [ 38.566369][ T3321] team0: Port device team_slave_1 added [ 38.605445][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.612663][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.639125][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.666322][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.673389][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.699359][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.715217][ T3320] hsr_slave_0: entered promiscuous mode [ 38.721293][ T3320] hsr_slave_1: entered promiscuous mode [ 38.727236][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.733018][ T3320] Cannot create hsr debugfs directory [ 38.767861][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.787328][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.800623][ T3321] hsr_slave_0: entered promiscuous mode [ 38.807238][ T3321] hsr_slave_1: entered promiscuous mode [ 38.813247][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.819000][ T3321] Cannot create hsr debugfs directory [ 38.826765][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.838159][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.884383][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.911243][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.920222][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.929660][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.983703][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.993892][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.002575][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.012552][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.055161][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.066599][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.076008][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.084941][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.137307][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.151859][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.161038][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.181629][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.193657][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.204802][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.212114][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.220205][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.234412][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.241502][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.258150][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.277858][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.302338][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.309445][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.324169][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.334981][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.342064][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.372830][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.397825][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.415040][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.427488][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.434770][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.445559][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.452731][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.473593][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.491036][ T2730] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.498151][ T2730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.515888][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.526382][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.541153][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.548291][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.565420][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.581614][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.599162][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.641381][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.665303][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.692865][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.706541][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.713649][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.744894][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.752060][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.821013][ T3316] veth0_vlan: entered promiscuous mode [ 39.832390][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.846481][ T3313] veth0_vlan: entered promiscuous mode [ 39.857075][ T3316] veth1_vlan: entered promiscuous mode [ 39.865763][ T3313] veth1_vlan: entered promiscuous mode [ 39.911457][ T3316] veth0_macvtap: entered promiscuous mode [ 39.919907][ T3313] veth0_macvtap: entered promiscuous mode [ 39.940281][ T3316] veth1_macvtap: entered promiscuous mode [ 39.948755][ T3313] veth1_macvtap: entered promiscuous mode [ 39.955764][ T3314] veth0_vlan: entered promiscuous mode [ 39.970981][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.981370][ T3314] veth1_vlan: entered promiscuous mode [ 39.993909][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.013578][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.025495][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.037348][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.053024][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.061830][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.082255][ T3314] veth0_macvtap: entered promiscuous mode [ 40.097680][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.107555][ T3314] veth1_macvtap: entered promiscuous mode [ 40.125334][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.150655][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.168012][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.177955][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.189885][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.201509][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.223791][ T2730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.234193][ T3482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.246810][ T3320] veth0_vlan: entered promiscuous mode [ 40.259018][ T3321] veth0_vlan: entered promiscuous mode [ 40.269044][ T3320] veth1_vlan: entered promiscuous mode [ 40.277829][ T3321] veth1_vlan: entered promiscuous mode [ 40.288001][ T2730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.299606][ T2730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.323870][ T2730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.346506][ T3320] veth0_macvtap: entered promiscuous mode [ 40.353677][ T2730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.364381][ T3320] veth1_macvtap: entered promiscuous mode [ 40.391482][ T3321] veth0_macvtap: entered promiscuous mode [ 40.408439][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.419928][ T3321] veth1_macvtap: entered promiscuous mode [ 40.428233][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 40.428285][ T29] audit: type=1400 audit(1760485814.657:159): avc: denied { create } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.435063][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.467513][ T3492] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 40.475124][ T3492] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 40.489325][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.502965][ T29] audit: type=1400 audit(1760485814.697:160): avc: denied { allowed } for pid=3493 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.513086][ T3492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.522262][ T29] audit: type=1400 audit(1760485814.697:161): avc: denied { create } for pid=3493 comm="syz.0.6" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.541656][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.551878][ T29] audit: type=1400 audit(1760485814.697:162): avc: denied { map } for pid=3493 comm="syz.0.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.582851][ T29] audit: type=1400 audit(1760485814.697:163): avc: denied { read } for pid=3493 comm="syz.0.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.606747][ T29] audit: type=1400 audit(1760485814.697:164): avc: denied { write } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.627290][ T29] audit: type=1400 audit(1760485814.697:165): avc: denied { read write } for pid=3493 comm="syz.0.6" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.634914][ T3505] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 40.650626][ T29] audit: type=1400 audit(1760485814.697:166): avc: denied { open } for pid=3493 comm="syz.0.6" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.682488][ T29] audit: type=1400 audit(1760485814.697:167): avc: denied { write } for pid=3493 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.702602][ T29] audit: type=1400 audit(1760485814.697:168): avc: denied { ioctl } for pid=3493 comm="syz.0.6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4500 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.743767][ T2730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.770943][ T2730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.782686][ T2730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.815431][ T2730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.830967][ T3510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 40.847056][ T2730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.859754][ T2730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.870361][ T3486] syz.3.4 (3486) used greatest stack depth: 10504 bytes left [ 40.895289][ T3510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3510 comm=syz.1.8 [ 40.912397][ T2730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.930283][ T2730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.967809][ T3515] loop4: detected capacity change from 0 to 512 [ 40.985031][ T3517] @ÿ: renamed from veth0_vlan (while UP) [ 41.010516][ T3515] EXT4-fs (loop4): failed to initialize system zone (-117) [ 41.023559][ T3519] Zero length message leads to an empty skb [ 41.032750][ T3515] EXT4-fs (loop4): mount failed [ 41.151201][ T3529] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 41.169961][ T3533] loop1: detected capacity change from 0 to 512 [ 41.179981][ T3533] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.188047][ T3533] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.16: EA inode hash validation failed [ 41.200805][ T3533] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.215882][ T3533] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.16: corrupted inode contents [ 41.236709][ T3533] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.16: mark_inode_dirty error [ 41.262766][ T3533] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.16: corrupted inode contents [ 41.285305][ T3533] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.16: mark_inode_dirty error [ 41.303768][ T3533] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.16: mark inode dirty (error -117) [ 41.325051][ T3533] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 41.347446][ T3533] EXT4-fs (loop1): 1 orphan inode deleted [ 41.361912][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.402326][ T3552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 41.446825][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.502390][ T3560] loop0: detected capacity change from 0 to 1024 [ 41.519877][ T3567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 41.539435][ T3560] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.607350][ T3560] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.617440][ T3560] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.625705][ T3564] netlink: 'syz.3.22': attribute type 3 has an invalid length. [ 41.641433][ T3567] hsr_slave_0: left promiscuous mode [ 41.647701][ T3560] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19: Invalid inode table block 0 in block_group 0 [ 41.662853][ T3560] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 41.673216][ T3567] hsr_slave_1: left promiscuous mode [ 41.692778][ T3560] EXT4-fs error (device loop0): ext4_quota_write:7334: inode #3: comm syz.0.19: mark_inode_dirty error [ 41.726348][ T3560] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.19: Failed to acquire dquot type 0 [ 41.739306][ T3574] loop3: detected capacity change from 0 to 512 [ 41.756626][ T3574] EXT4-fs: Ignoring removed nobh option [ 41.763932][ T3560] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19: Invalid inode table block 0 in block_group 0 [ 41.776712][ T3574] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.791754][ T3560] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 41.805797][ T3574] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.22: corrupted inode contents [ 41.815548][ T3560] EXT4-fs error (device loop0): ext4_ext_truncate:4475: inode #15: comm syz.0.19: mark_inode_dirty error [ 41.831391][ T3560] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19: Invalid inode table block 0 in block_group 0 [ 41.833787][ T3578] loop2: detected capacity change from 0 to 512 [ 41.854924][ T3560] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 41.866689][ T3560] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 41.871078][ T3584] netlink: 664 bytes leftover after parsing attributes in process `syz.4.25'. [ 41.875641][ T3574] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.22: mark_inode_dirty error [ 41.895446][ T3560] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19: Invalid inode table block 0 in block_group 0 [ 41.896641][ T3574] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.22: corrupted inode contents [ 41.909197][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 41.930372][ T3560] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 41.931214][ T3574] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.22: mark_inode_dirty error [ 41.940585][ T3560] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.19: mark_inode_dirty error [ 41.962466][ T3584] hsr_slave_0: left promiscuous mode [ 41.969063][ T3584] hsr_slave_1: left promiscuous mode [ 41.969264][ T3578] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.979471][ T3560] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 41.985984][ T3574] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.22: Failed to acquire dquot type 0 [ 41.990275][ T3560] EXT4-fs (loop0): 1 truncate cleaned up [ 42.009659][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.012052][ T3574] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.22: corrupted inode contents [ 42.041685][ T3578] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.23: EA inode hash validation failed [ 42.066405][ T3578] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.23: corrupted inode contents [ 42.077506][ T3546] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.19: Invalid inode table block 0 in block_group 0 [ 42.080407][ T3574] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.22: mark_inode_dirty error [ 42.094773][ T3546] xt_hashlimit: max too large, truncated to 1048576 [ 42.109294][ T3546] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.19: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 42.118773][ T3574] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.22: corrupted inode contents [ 42.128300][ T3578] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.23: mark_inode_dirty error [ 42.140223][ T3574] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.22: mark_inode_dirty error [ 42.161763][ T3574] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.22: corrupted inode contents [ 42.176543][ T3574] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 42.190428][ T3574] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.22: corrupted inode contents [ 42.202649][ T3574] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.22: mark_inode_dirty error [ 42.214202][ T3578] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.23: corrupted inode contents [ 42.214233][ T3574] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 42.235789][ T3574] EXT4-fs (loop3): 1 truncate cleaned up [ 42.241623][ T3578] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.23: mark_inode_dirty error [ 42.241969][ T3574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.272208][ T3574] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.283867][ T3578] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.23: mark inode dirty (error -117) [ 42.297992][ T3578] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 42.307355][ T3578] EXT4-fs (loop2): 1 orphan inode deleted [ 42.313876][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.356967][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.367257][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.400333][ T3574] syz.3.22 (3574) used greatest stack depth: 9872 bytes left [ 42.409553][ T3593] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.424484][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.439145][ T3594] loop2: detected capacity change from 0 to 512 [ 42.445983][ T3594] ======================================================= [ 42.445983][ T3594] WARNING: The mand mount option has been deprecated and [ 42.445983][ T3594] and is ignored by this kernel. Remove the mand [ 42.445983][ T3594] option from the mount to silence this warning. [ 42.445983][ T3594] ======================================================= [ 42.483717][ T3594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.498442][ T3594] EXT4-fs (loop2): 1 truncate cleaned up [ 42.505636][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.546500][ T3594] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.2.26: path /3/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 42.571511][ T3594] EXT4-fs (loop2): Remounting filesystem read-only [ 42.589434][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.603861][ T3602] vhci_hcd: invalid port number 96 [ 42.609038][ T3602] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 42.668301][ T3609] netlink: 'syz.2.34': attribute type 1 has an invalid length. [ 42.676070][ T3609] netlink: 224 bytes leftover after parsing attributes in process `syz.2.34'. [ 42.763825][ T3616] netlink: 'syz.2.35': attribute type 3 has an invalid length. [ 42.836754][ T3618] loop2: detected capacity change from 0 to 512 [ 42.845190][ T3618] EXT4-fs: Ignoring removed nobh option [ 42.869690][ T3618] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.35: corrupted inode contents [ 42.881677][ T3618] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.35: mark_inode_dirty error [ 42.894314][ T3618] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.35: corrupted inode contents [ 42.906247][ T3618] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.35: mark_inode_dirty error [ 42.917960][ T3618] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.35: Failed to acquire dquot type 0 [ 42.929719][ T3618] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.35: corrupted inode contents [ 42.942518][ T3618] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.35: mark_inode_dirty error [ 42.954397][ T3618] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.35: corrupted inode contents [ 42.966864][ T3618] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.35: mark_inode_dirty error [ 42.978697][ T3618] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.35: corrupted inode contents [ 42.990804][ T3618] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 42.999575][ T3618] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.35: corrupted inode contents [ 43.012000][ T3618] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.35: mark_inode_dirty error [ 43.033461][ T3618] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 43.043881][ T3618] EXT4-fs (loop2): 1 truncate cleaned up [ 43.054547][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.068266][ T3618] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.090756][ T3626] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 43.098521][ T3626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.37'. [ 43.107879][ T3623] loop1: detected capacity change from 0 to 4096 [ 43.116991][ T3623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.130825][ T3623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.153710][ T3623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.209060][ T3629] loop4: detected capacity change from 0 to 4096 [ 43.217521][ T3632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 43.224227][ T3629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.227538][ T3632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.240476][ T3632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.248711][ T3632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.250140][ T3629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.256140][ T3632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.276625][ T3629] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.370187][ C0] hrtimer: interrupt took 27330 ns [ 43.448871][ T3646] netlink: 44 bytes leftover after parsing attributes in process `syz.3.44'. [ 43.537004][ T3652] loop3: detected capacity change from 0 to 512 [ 43.548286][ T3652] EXT4-fs (loop3): failed to initialize system zone (-117) [ 43.556069][ T3652] EXT4-fs (loop3): mount failed [ 43.594249][ T3618] syz.2.35 (3618) used greatest stack depth: 9680 bytes left [ 43.630648][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.641825][ T3660] C: renamed from team_slave_0 (while UP) [ 43.655475][ T3660] netlink: 'syz.0.50': attribute type 3 has an invalid length. [ 43.668547][ T3664] loop3: detected capacity change from 0 to 512 [ 43.706880][ T3664] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.714419][ T3671] hsr_slave_0: left promiscuous mode [ 43.717935][ T3664] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.53: EA inode hash validation failed [ 43.732530][ T3671] hsr_slave_1: left promiscuous mode [ 43.733228][ T3664] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.53: corrupted inode contents [ 43.750050][ T3664] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.53: mark_inode_dirty error [ 43.767214][ T3664] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.53: corrupted inode contents [ 43.779627][ T3664] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.53: mark_inode_dirty error [ 43.792381][ T3664] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.53: mark inode dirty (error -117) [ 43.805400][ T3664] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 43.815385][ T3664] EXT4-fs (loop3): 1 orphan inode deleted [ 43.815429][ T3676] hsr_slave_0: left promiscuous mode [ 43.821557][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.840819][ T3676] hsr_slave_1: left promiscuous mode [ 43.862906][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.889267][ T3681] netlink: 'syz.3.57': attribute type 3 has an invalid length. [ 43.966912][ T3686] loop3: detected capacity change from 0 to 512 [ 43.975555][ T3686] EXT4-fs: Ignoring removed nobh option [ 43.998661][ T3686] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.57: corrupted inode contents [ 44.024468][ T3686] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #3: comm syz.3.57: mark_inode_dirty error [ 44.037211][ T3686] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.57: corrupted inode contents [ 44.049694][ T3686] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.57: mark_inode_dirty error [ 44.061501][ T3686] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.57: Failed to acquire dquot type 0 [ 44.074451][ T3686] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.57: corrupted inode contents [ 44.117146][ T3686] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #16: comm syz.3.57: mark_inode_dirty error [ 44.136160][ T3686] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.57: corrupted inode contents [ 44.154746][ T3686] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.57: mark_inode_dirty error [ 44.178573][ T3686] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.57: corrupted inode contents [ 44.192077][ T3686] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 44.207490][ T3686] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.57: corrupted inode contents [ 44.219709][ T3686] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.57: mark_inode_dirty error [ 44.231186][ T3686] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 44.247604][ T3686] EXT4-fs (loop3): 1 truncate cleaned up [ 44.282355][ T3686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.298118][ T3686] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.361891][ T3720] loop1: detected capacity change from 0 to 512 [ 44.370490][ T3720] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.377668][ T3720] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.68: EA inode hash validation failed [ 44.395497][ T3720] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.68: corrupted inode contents [ 44.433912][ T3720] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.68: mark_inode_dirty error [ 44.471783][ T3720] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.68: corrupted inode contents [ 44.488127][ T3720] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.68: mark_inode_dirty error [ 44.500611][ T3720] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.68: mark inode dirty (error -117) [ 44.502831][ T3736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.514582][ T3720] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 44.536472][ T3720] EXT4-fs (loop1): 1 orphan inode deleted [ 44.542943][ T3720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.572268][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.603845][ T3736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.644183][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.654851][ T3745] loop4: detected capacity change from 0 to 512 [ 44.663990][ T3745] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.684063][ T3745] EXT4-fs (loop4): failed to initialize system zone (-117) [ 44.691410][ T3745] EXT4-fs (loop4): mount failed [ 44.699425][ T3736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.739099][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.752240][ T3736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.762875][ T3757] loop2: detected capacity change from 0 to 4096 [ 44.769765][ T3757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.790732][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.822048][ T3757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.831242][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.850033][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.863081][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.877010][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.910031][ T3767] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.994679][ T3781] C: renamed from team_slave_0 (while UP) [ 45.001832][ T3781] netlink: 'syz.2.83': attribute type 3 has an invalid length. [ 45.025711][ T3767] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.091339][ T3786] loop3: detected capacity change from 0 to 4096 [ 45.101094][ T3767] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.112365][ T3786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.124244][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.139344][ T3786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.185976][ T3767] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.211226][ T3794] Cannot find add_set index 4 as target [ 45.240966][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.249481][ T2730] Bluetooth: hci1: Frame reassembly failed (-84) [ 45.264465][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.284984][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.301781][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.042859][ T3803] loop2: detected capacity change from 0 to 4096 [ 46.050661][ T3803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.060140][ T3803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.073622][ T3803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.131885][ T3807] loop2: detected capacity change from 0 to 4096 [ 46.139829][ T3807] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.149016][ T3807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.162366][ T3807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.252349][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 46.252369][ T29] audit: type=1326 audit(1760485820.477:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.259171][ T3815] netlink: 'syz.2.95': attribute type 3 has an invalid length. [ 46.281880][ T29] audit: type=1326 audit(1760485820.477:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.289491][ T3815] __nla_validate_parse: 9 callbacks suppressed [ 46.289509][ T3815] netlink: 152 bytes leftover after parsing attributes in process `syz.2.95'. [ 46.337121][ T29] audit: type=1326 audit(1760485820.477:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.360629][ T29] audit: type=1326 audit(1760485820.477:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.383896][ T29] audit: type=1326 audit(1760485820.477:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.407157][ T29] audit: type=1326 audit(1760485820.477:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.430465][ T29] audit: type=1326 audit(1760485820.477:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.453711][ T29] audit: type=1326 audit(1760485820.477:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.476885][ T29] audit: type=1326 audit(1760485820.477:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.500161][ T29] audit: type=1326 audit(1760485820.477:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 46.642821][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.652007][ T3829] loop2: detected capacity change from 0 to 512 [ 46.659960][ T3829] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.666678][ T3829] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.101: EA inode hash validation failed [ 46.679451][ T3829] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.101: corrupted inode contents [ 46.691481][ T3829] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.101: mark_inode_dirty error [ 46.703262][ T3829] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.101: corrupted inode contents [ 46.715360][ T3829] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.101: mark_inode_dirty error [ 46.727546][ T3829] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.101: mark inode dirty (error -117) [ 46.740657][ T3829] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 46.749755][ T3829] EXT4-fs (loop2): 1 orphan inode deleted [ 46.755926][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.778241][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.803949][ T3832] netlink: 'syz.2.102': attribute type 3 has an invalid length. [ 46.871323][ T3833] loop2: detected capacity change from 0 to 512 [ 46.877966][ T3833] EXT4-fs: Ignoring removed nobh option [ 46.895350][ T3833] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.102: corrupted inode contents [ 46.907379][ T3833] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.102: mark_inode_dirty error [ 46.919125][ T3833] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.102: corrupted inode contents [ 46.931016][ T3833] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.102: mark_inode_dirty error [ 46.942662][ T3833] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.102: Failed to acquire dquot type 0 [ 46.954414][ T3833] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.102: corrupted inode contents [ 46.966483][ T3833] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.102: mark_inode_dirty error [ 46.978072][ T3833] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.102: corrupted inode contents [ 46.990192][ T3833] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.102: mark_inode_dirty error [ 47.001661][ T3833] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.102: corrupted inode contents [ 47.013815][ T3833] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 47.022488][ T3833] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.102: corrupted inode contents [ 47.034606][ T3833] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.102: mark_inode_dirty error [ 47.045848][ T3833] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 47.055399][ T3833] EXT4-fs (loop2): 1 truncate cleaned up [ 47.061484][ T3833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.074086][ T3833] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.186371][ T3837] loop1: detected capacity change from 0 to 4096 [ 47.193096][ T3837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.202466][ T3837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.215787][ T3837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.288341][ T3842] loop1: detected capacity change from 0 to 4096 [ 47.292911][ T3750] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 47.294889][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 47.302228][ T3842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.319532][ T3842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.335201][ T3842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.394738][ T3847] loop1: detected capacity change from 0 to 512 [ 47.404357][ T3847] EXT4-fs (loop1): failed to initialize system zone (-117) [ 47.411781][ T3847] EXT4-fs (loop1): mount failed [ 47.509048][ T3856] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 47.516888][ T3856] netlink: 224 bytes leftover after parsing attributes in process `syz.0.111'. [ 47.518211][ T3858] loop1: detected capacity change from 0 to 512 [ 47.543217][ T3858] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.559863][ T3858] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.112: EA inode hash validation failed [ 47.574682][ T3858] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.112: corrupted inode contents [ 47.586989][ T3858] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #15: comm syz.1.112: mark_inode_dirty error [ 47.598934][ T3858] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #15: comm syz.1.112: corrupted inode contents [ 47.611301][ T3858] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.112: mark_inode_dirty error [ 47.623409][ T3858] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.112: mark inode dirty (error -117) [ 47.636550][ T3858] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 47.645791][ T3858] EXT4-fs (loop1): 1 orphan inode deleted [ 47.651981][ T3858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.678829][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.689567][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.721887][ T3868] netlink: 664 bytes leftover after parsing attributes in process `syz.2.115'. [ 47.785569][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 47.823076][ T3879] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.839867][ T3880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.853000][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 47.862086][ T3879] bridge_slave_1: left allmulticast mode [ 47.868083][ T3879] bridge_slave_1: left promiscuous mode [ 47.870280][ T3884] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 47.873890][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.881379][ T3884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.123'. [ 47.901481][ T3879] bridge_slave_0: left allmulticast mode [ 47.907317][ T3879] bridge_slave_0: left promiscuous mode [ 47.913143][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.973998][ T3880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.065857][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.073924][ T3880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.086313][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.093199][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.100092][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.107042][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.113902][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.120667][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.127438][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.134208][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.140977][ T3903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 48.215413][ T3880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.289460][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.317504][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.345282][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.365067][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.523699][ T3917] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 48.625406][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.138'. [ 48.671769][ T3927] loop2: detected capacity change from 0 to 512 [ 48.687649][ T3927] EXT4-fs (loop2): failed to initialize system zone (-117) [ 48.702383][ T3927] EXT4-fs (loop2): mount failed [ 48.725157][ T3930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 48.751551][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.759142][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.782545][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.790028][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.794905][ T3932] Cannot find add_set index 4 as target [ 48.850220][ T3924] loop4: detected capacity change from 0 to 4096 [ 48.857970][ T3924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.867774][ T3924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.904720][ T3940] usb usb8: usbfs: process 3940 (syz.3.143) did not claim interface 0 before use [ 48.952696][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.966407][ T3944] usb usb8: usbfs: process 3944 (syz.3.145) did not claim interface 0 before use [ 48.998224][ T3946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 49.008615][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.016140][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.025859][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.033693][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.045340][ T3948] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 49.076983][ T3952] C: renamed from team_slave_0 (while UP) [ 49.084635][ T3952] netlink: 'syz.4.149': attribute type 3 has an invalid length. [ 49.092313][ T3952] netlink: 152 bytes leftover after parsing attributes in process `syz.4.149'. [ 49.295840][ T3972] loop3: detected capacity change from 0 to 512 [ 49.328725][ T3972] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.157: casefold flag without casefold feature [ 49.346354][ T3972] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.157: couldn't read orphan inode 15 (err -117) [ 49.363012][ T3972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.386344][ T3982] netlink: 'syz.0.161': attribute type 3 has an invalid length. [ 49.429202][ T3988] loop0: detected capacity change from 0 to 512 [ 49.443834][ T3988] EXT4-fs (loop0): failed to initialize system zone (-117) [ 49.451908][ T3988] EXT4-fs (loop0): mount failed [ 49.491510][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.517688][ T3995] bridge_slave_1: left allmulticast mode [ 49.523594][ T3995] bridge_slave_1: left promiscuous mode [ 49.529447][ T3995] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.554823][ T3995] bridge_slave_0: left allmulticast mode [ 49.560610][ T3995] bridge_slave_0: left promiscuous mode [ 49.566441][ T3995] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.713168][ T4011] netlink: 'syz.4.172': attribute type 3 has an invalid length. [ 49.752908][ T4019] loop3: detected capacity change from 0 to 512 [ 49.760809][ T4019] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.174: casefold flag without casefold feature [ 49.780898][ T4024] netlink: 'syz.0.176': attribute type 3 has an invalid length. [ 49.786666][ T4019] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.174: couldn't read orphan inode 15 (err -117) [ 49.802068][ T4019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.837429][ T4028] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 49.857318][ T4029] loop0: detected capacity change from 0 to 512 [ 49.864428][ T4029] EXT4-fs: Ignoring removed nobh option [ 49.874544][ T4029] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #3: comm syz.0.176: corrupted inode contents [ 49.886659][ T4029] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #3: comm syz.0.176: mark_inode_dirty error [ 49.903264][ T4029] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #3: comm syz.0.176: corrupted inode contents [ 49.916596][ T4029] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.176: mark_inode_dirty error [ 49.916860][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.928902][ T4029] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.176: Failed to acquire dquot type 0 [ 49.959927][ T4029] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.176: corrupted inode contents [ 49.975853][ T4037] Cannot find add_set index 4 as target [ 50.021125][ T4029] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #16: comm syz.0.176: mark_inode_dirty error [ 50.048174][ T4029] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.176: corrupted inode contents [ 50.066901][ T4029] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.176: mark_inode_dirty error [ 50.082691][ T4029] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.176: corrupted inode contents [ 50.103304][ T4029] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 50.122405][ T4029] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #16: comm syz.0.176: corrupted inode contents [ 50.142634][ T4029] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.176: mark_inode_dirty error [ 50.164643][ T4053] C: renamed from team_slave_0 (while UP) [ 50.173221][ T4029] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 50.183833][ T4053] netlink: 'syz.3.187': attribute type 3 has an invalid length. [ 50.193097][ T4029] EXT4-fs (loop0): 1 truncate cleaned up [ 50.199271][ T4029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.234012][ T4029] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.341476][ T4065] usb usb8: usbfs: process 4065 (syz.4.191) did not claim interface 0 before use [ 50.379246][ T4068] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.471375][ T4074] Cannot find add_set index 4 as target [ 50.614654][ T4084] netlink: 'syz.2.199': attribute type 3 has an invalid length. [ 50.652930][ T4086] loop4: detected capacity change from 0 to 128 [ 50.670308][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.808984][ T4100] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.866736][ T4107] loop4: detected capacity change from 0 to 512 [ 50.887923][ T4109] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.893823][ T4107] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.208: casefold flag without casefold feature [ 50.919336][ T4107] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.208: couldn't read orphan inode 15 (err -117) [ 50.942056][ T4107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.999416][ T4120] loop3: detected capacity change from 0 to 512 [ 51.006205][ T4122] usb usb8: usbfs: process 4122 (syz.1.213) did not claim interface 0 before use [ 51.010609][ T4120] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.016861][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.034698][ T4120] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.212: EA inode hash validation failed [ 51.072042][ T4120] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.212: corrupted inode contents [ 51.107828][ T4120] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.212: mark_inode_dirty error [ 51.147392][ T4120] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.212: corrupted inode contents [ 51.176921][ T4120] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.212: mark_inode_dirty error [ 51.212853][ T4120] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.212: mark inode dirty (error -117) [ 51.229822][ T4130] loop4: detected capacity change from 0 to 512 [ 51.266393][ T4120] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 51.285937][ T4130] EXT4-fs (loop4): failed to initialize system zone (-117) [ 51.294030][ T4120] EXT4-fs (loop3): 1 orphan inode deleted [ 51.297283][ T4130] EXT4-fs (loop4): mount failed [ 51.314085][ T4133] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 51.321780][ T4133] __nla_validate_parse: 12 callbacks suppressed [ 51.321862][ T4133] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 51.325900][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.403762][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.428118][ T4138] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.487371][ T4138] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.536426][ T4143] usb usb8: usbfs: process 4143 (syz.3.221) did not claim interface 0 before use [ 51.556647][ T4138] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.617413][ T29] kauditd_printk_skb: 937 callbacks suppressed [ 51.617427][ T29] audit: type=1326 audit(1760485825.847:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.647083][ T29] audit: type=1326 audit(1760485825.847:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.657036][ T4146] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 51.683673][ T29] audit: type=1326 audit(1760485825.907:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.707210][ T29] audit: type=1326 audit(1760485825.907:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.730622][ T29] audit: type=1326 audit(1760485825.907:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.755793][ T4138] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.760230][ T29] audit: type=1326 audit(1760485825.917:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.789030][ T29] audit: type=1326 audit(1760485825.917:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.812451][ T29] audit: type=1326 audit(1760485825.917:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.838693][ T29] audit: type=1326 audit(1760485825.997:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.839184][ T4150] netlink: 'syz.0.224': attribute type 3 has an invalid length. [ 51.862116][ T29] audit: type=1326 audit(1760485825.997:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9604eec9 code=0x7ffc0000 [ 51.893219][ T4150] netlink: 144 bytes leftover after parsing attributes in process `syz.0.224'. [ 51.956719][ T3442] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.969317][ T3442] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.990559][ T4156] loop3: detected capacity change from 0 to 512 [ 51.998398][ T3442] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.009778][ T2730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.018435][ T4156] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.025617][ T4156] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.225: EA inode hash validation failed [ 52.038485][ T4156] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.225: corrupted inode contents [ 52.052648][ T4156] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.225: mark_inode_dirty error [ 52.074502][ T4156] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.225: corrupted inode contents [ 52.089296][ T4156] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.225: mark_inode_dirty error [ 52.102728][ T4156] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.225: mark inode dirty (error -117) [ 52.115999][ T4165] usb usb8: usbfs: process 4165 (syz.2.230) did not claim interface 0 before use [ 52.129737][ T4156] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 52.156669][ T4156] EXT4-fs (loop3): 1 orphan inode deleted [ 52.167776][ T4156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 52.180425][ T4169] loop1: detected capacity change from 0 to 512 [ 52.203575][ T4173] netlink: 664 bytes leftover after parsing attributes in process `syz.0.234'. [ 52.213905][ T4169] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.232: casefold flag without casefold feature [ 52.215182][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.227465][ T4169] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.232: couldn't read orphan inode 15 (err -117) [ 52.249446][ T4169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.264719][ T4173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 52.295121][ T4171] loop2: detected capacity change from 0 to 512 [ 52.311622][ T4171] EXT4-fs (loop2): failed to initialize system zone (-117) [ 52.320430][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.321452][ T4177] lo speed is unknown, defaulting to 1000 [ 52.335895][ T4171] EXT4-fs (loop2): mount failed [ 52.360458][ T4177] lo speed is unknown, defaulting to 1000 [ 52.368675][ T4177] lo speed is unknown, defaulting to 1000 [ 52.376047][ T4181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.235'. [ 52.391068][ T4177] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.407128][ T4177] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.419947][ T4177] lo speed is unknown, defaulting to 1000 [ 52.421666][ T4185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 52.436591][ T4177] lo speed is unknown, defaulting to 1000 [ 52.454956][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.462399][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.481417][ T4188] netlink: 'syz.2.239': attribute type 3 has an invalid length. [ 52.502857][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.510371][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.529488][ T4177] lo speed is unknown, defaulting to 1000 [ 52.535797][ T4177] lo speed is unknown, defaulting to 1000 [ 52.548065][ T4190] loop2: detected capacity change from 0 to 512 [ 52.555446][ T4177] lo speed is unknown, defaulting to 1000 [ 52.563669][ T4190] EXT4-fs: Ignoring removed nobh option [ 52.573080][ T4186] lo speed is unknown, defaulting to 1000 [ 52.618973][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.239: corrupted inode contents [ 52.649887][ T4190] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #3: comm syz.2.239: mark_inode_dirty error [ 52.688775][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #3: comm syz.2.239: corrupted inode contents [ 52.740770][ T4201] loop3: detected capacity change from 0 to 512 [ 52.753072][ T4190] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.239: mark_inode_dirty error [ 52.804168][ T4201] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.821081][ T4201] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.242: EA inode hash validation failed [ 52.833851][ T4190] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.239: Failed to acquire dquot type 0 [ 52.861836][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.239: corrupted inode contents [ 52.891637][ T4201] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.242: corrupted inode contents [ 52.905716][ T4190] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #16: comm syz.2.239: mark_inode_dirty error [ 52.917389][ T4201] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #15: comm syz.3.242: mark_inode_dirty error [ 52.929524][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.239: corrupted inode contents [ 52.936259][ T4201] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #15: comm syz.3.242: corrupted inode contents [ 52.957103][ T4201] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.242: mark_inode_dirty error [ 52.975447][ T4190] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.239: mark_inode_dirty error [ 52.994664][ T4201] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.242: mark inode dirty (error -117) [ 53.007434][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.239: corrupted inode contents [ 53.019591][ T4201] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 53.032315][ T4201] EXT4-fs (loop3): 1 orphan inode deleted [ 53.032519][ T4190] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 53.038602][ T4201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 53.052461][ T4190] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.239: corrupted inode contents [ 53.071219][ T4190] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.239: mark_inode_dirty error [ 53.082773][ T4190] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 53.092121][ T4190] EXT4-fs (loop2): 1 truncate cleaned up [ 53.098351][ T4190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.128450][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.139252][ T4190] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.220206][ T4224] Cannot find add_set index 4 as target [ 53.227424][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 53.248151][ T4227] loop1: detected capacity change from 0 to 512 [ 53.264075][ T4227] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.253: casefold flag without casefold feature [ 53.285614][ T4227] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.253: couldn't read orphan inode 15 (err -117) [ 53.310816][ T4230] loop3: detected capacity change from 0 to 512 [ 53.318051][ T4227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.318732][ T4190] syz.2.239 (4190) used greatest stack depth: 9608 bytes left [ 53.342530][ T4230] EXT4-fs (loop3): failed to initialize system zone (-117) [ 53.350001][ T4230] EXT4-fs (loop3): mount failed [ 53.371000][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.417487][ T4233] netlink: 664 bytes leftover after parsing attributes in process `syz.2.255'. [ 53.448213][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 53.465208][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.487188][ T4237] net_ratelimit: 21106 callbacks suppressed [ 53.487202][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.515006][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.521951][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.528763][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.535592][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.542393][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.549176][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.556004][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.562868][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.569627][ T4237] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 53.658759][ T4243] lo speed is unknown, defaulting to 1000 [ 53.726280][ T4251] tipc: Started in network mode [ 53.731283][ T4251] tipc: Node identity ac14140f, cluster identity 4711 [ 53.731778][ T4253] Cannot find add_set index 4 as target [ 53.756012][ T4251] tipc: New replicast peer: 255.255.255.255 [ 53.762355][ T4251] tipc: Enabled bearer , priority 10 [ 53.777278][ T4255] netlink: 'syz.0.264': attribute type 3 has an invalid length. [ 53.785068][ T4255] netlink: 152 bytes leftover after parsing attributes in process `syz.0.264'. [ 53.931824][ T4265] loop0: detected capacity change from 0 to 512 [ 53.943703][ T4265] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.950958][ T4265] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.269: EA inode hash validation failed [ 53.963812][ T4265] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.269: corrupted inode contents [ 53.978313][ T4265] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.269: mark_inode_dirty error [ 53.990179][ T4265] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.269: corrupted inode contents [ 54.002231][ T4265] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.269: mark_inode_dirty error [ 54.014860][ T4265] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.269: mark inode dirty (error -117) [ 54.027602][ T4265] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 54.036867][ T4265] EXT4-fs (loop0): 1 orphan inode deleted [ 54.043208][ T4265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.068489][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.249137][ T4279] loop0: detected capacity change from 0 to 8192 [ 54.274016][ T4285] loop3: detected capacity change from 0 to 512 [ 54.292385][ T4285] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.273: casefold flag without casefold feature [ 54.307154][ T4285] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.273: couldn't read orphan inode 15 (err -117) [ 54.392817][ T4279] ================================================================== [ 54.400935][ T4279] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 54.408067][ T4279] [ 54.410403][ T4279] write to 0xffff88811b5b03d8 of 2 bytes by task 4270 on cpu 1: [ 54.418145][ T4279] fat16_ent_put+0x28/0x60 [ 54.422628][ T4279] fat_ent_write+0x6c/0xe0 [ 54.427051][ T4279] fat_chain_add+0x15d/0x440 [ 54.431657][ T4279] fat_get_block+0x46c/0x5e0 [ 54.436269][ T4279] __block_write_begin_int+0x400/0xf90 [ 54.441744][ T4279] cont_write_begin+0x5fc/0x970 [ 54.446618][ T4279] fat_write_begin+0x4f/0xe0 [ 54.451227][ T4279] cont_write_begin+0x1b0/0x970 [ 54.456098][ T4279] fat_write_begin+0x4f/0xe0 [ 54.460713][ T4279] generic_cont_expand_simple+0xb0/0x150 [ 54.467163][ T4279] fat_cont_expand+0x3e/0x170 [ 54.471935][ T4279] fat_setattr+0x2a5/0x8a0 [ 54.476360][ T4279] notify_change+0x872/0x8f0 [ 54.480963][ T4279] do_ftruncate+0x34b/0x450 [ 54.485478][ T4279] __x64_sys_ftruncate+0x68/0xc0 [ 54.490429][ T4279] x64_sys_call+0x2d61/0x3000 [ 54.495120][ T4279] do_syscall_64+0xd2/0x200 [ 54.499647][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.505547][ T4279] [ 54.507872][ T4279] read to 0xffff88811b5b0200 of 512 bytes by task 4279 on cpu 0: [ 54.515587][ T4279] fat_mirror_bhs+0x1df/0x320 [ 54.520274][ T4279] fat_alloc_clusters+0x98b/0xa80 [ 54.525314][ T4279] fat_get_block+0x258/0x5e0 [ 54.529914][ T4279] __block_write_begin_int+0x400/0xf90 [ 54.535391][ T4279] cont_write_begin+0x5fc/0x970 [ 54.540260][ T4279] fat_write_begin+0x4f/0xe0 [ 54.544862][ T4279] generic_perform_write+0x184/0x490 [ 54.550169][ T4279] __generic_file_write_iter+0x9e/0x120 [ 54.555728][ T4279] generic_file_write_iter+0x8d/0x2f0 [ 54.561110][ T4279] do_iter_readv_writev+0x4a1/0x540 [ 54.566330][ T4279] vfs_writev+0x2df/0x8b0 [ 54.570678][ T4279] __se_sys_pwritev2+0xfc/0x1c0 [ 54.575542][ T4279] __x64_sys_pwritev2+0x67/0x80 [ 54.580405][ T4279] x64_sys_call+0x2c59/0x3000 [ 54.585104][ T4279] do_syscall_64+0xd2/0x200 [ 54.589656][ T4279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.595563][ T4279] [ 54.597885][ T4279] Reported by Kernel Concurrency Sanitizer on: [ 54.604084][ T4279] CPU: 0 UID: 0 PID: 4279 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.613735][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.623911][ T4279] ================================================================== [ 54.762651][ T3387] tipc: Node number set to 2886997007 [ 55.602880][ T3750] Bluetooth: hci0: Opcode 0x1003 failed: -110