last executing test programs: 1m53.647042354s ago: executing program 3 (id=4): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) setitimer(0x0, &(0x7f0000000000)={{0xffffffff}, {0x0, 0x82}}, 0x0) alarm(0x4000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f000001b000)) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) utimes(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x8c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000094af7f7a000000002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000000000007000000095000000000000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca28}, 0x94) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x738, &(0x7f0000000780)="$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") sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060089"], 0x24}}, 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m52.55562977s ago: executing program 3 (id=8): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0xfd, 0x2, 0x0, 0x0, 0x100, 0x52420, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x4}, 0x100002, 0x0, 0x4, 0x4, 0x3f62, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000008d58a778ef7d038f6d7cfd762879cbbaabc1653673712868697f4e4e91060b4ffe477f0f2d24ba3a89ba62d1bccfbd2530f7a85be2830b81cbdf67fa937af6d2b7003c6f4b5aa3435e4bada413f0a8cc419e386f0da7493a7f46f485eb81f5f029913555799765f01db51baf5e0cdad80e17e29f104b999f86b04b656bb484f823a196f694cbf125f1feed993aada92aafd6465ddf0048503addebf00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000001f00000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x20000268, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x40, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) capget(&(0x7f0000000080)={0x20080522}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ifreq(r3, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES8], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18) r6 = inotify_init() r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$inet(0x2, 0x2, 0x11) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r6, 0xffffffffffffffff, 0x0) 1m52.396331334s ago: executing program 3 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r3, 0x209}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x24, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) r10 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\x83\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x124, &(0x7f0000000300)={0x0, 0x3, 0x3}) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r10, &(0x7f0000000540)=""/207, 0xcf, 0xffefffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0xfffffffffffffe4a, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r13, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m52.09940106s ago: executing program 3 (id=14): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) sigaltstack(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1, 0x0, 0xfffffffffffffd78}, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000feffffffff91f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$inet_udp(0x2, 0x2, 0x0) 1m50.466103915s ago: executing program 3 (id=24): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@newtfilter={0xda4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xd70, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff2}}, @TCA_MATCHALL_ACT={0xd5c, 0x2, [@m_mpls={0xd0, 0x1, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x77, 0x8, 0x2, 0xfffffff3}, 0x2}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2753}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x56, 0x6, "8a433d3d95c190171525059071c82e106c7306f88c6a1237891c960e10a76cd23c8efea3faaa86644682fddb5adf2dc2b0a2a7ca8695d27f940e16dbc69d3386afb3bd29d467d74d1618092542145d9d5869"}, {0xc}, {0xc, 0x8, {0x0, 0xdeaaa9a01f70c4f7}}}}, @m_ife={0xc88, 0xc, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x0, 0x5, 0x8}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x419f2924}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x9, 0x3, 0x0, 0xd}, 0x1}}]}, {0xc04, 0x6, "233c36e815d98ff547529695de25d13beb2d0fcaabd122a135d13317915ad9a1690aeb9c693f7780f08f653d8a106bcbc22cc274c70217d1b43321d0c74b75f164614bf773762a7567524f83792385d4f1ce8b55164ba31cba3064d23ca0f98a9cf24d6acad0f894878110e0ea3fbf5d7dcc221f203b0bcd9c673bc05c361db956026fd85a905c64b66f2f0eb408810131ea9f933f5b665cb7e5fc2a71bc21548142b265c728ef9d02bce849916e7d5e33d70c316df76d7740809e1ee676d786515f2842363e5da08b2132788609010c865199aa028296530f58b179b0034cc29f3025e7168d661d21e410229601f1c975b56cbc75ab9ce39587d128ee400ec9607bf359b81abe298f861d93787f0da9770c39cc92de5b8dc84ad5d9d0fecfbd6471d51b6b70eab998648b724c121c85f9b27bef8f0b4ceb9c0cc2f761b20036922f63959260032fd9c489687ce4212173330f1b057ec9b5b8a590e444093b9bf9f65efd1e455b1090c028f13c4ed783a733015d1136a3342385250a8a70a305e07aa87cff4efebb6f4431c1562fb5b2c86cde35758d160c18739803768b56981a3a10e2a89cf9bec68c6ec4b56d7405a18476ac8e9c123d750740ce1cd2dba0fc915ac90e06ef0d1febb040d2bbe9c40d9a0c284305ffab66977041c7c1ee3eda672d2162f5994bc64689d094a54cd4a9f22cac836006c4c478c6ac3e97846fe91438248de8843d4e22da39515e187976e21d273d7aeac0dd4bd44206da60bdd3d723349feffff36b91a101a1c5c8846f6da6152ca340033b807b4031c72bb0ffa0794a339b7d185a76c6700cde08e440e149aa3b4b064269fd26e419e1a1445ea91c24f4957411084e3a6e09164527c809c10ace41e791e1c4d8b94c15ef418d92cf6b9d88b793c388c3b01bf53b6531a2ef707f161fb2ee9014f80dcc201913136351aca0027e5e67f61127fb604866a690262d4bb9b4ee2a5eaa64aef811f8eeee407c863199bf86e82a0ddc2f596d1eb17b0419d48c745aac0c77f0743fc77d7366b8a069b51b96a6254a48c31f297afb6c7dc8515030c270fa8cb5facd165b57f4d573fe0880acc1571bbcf5b846f646a61cfa5fc5beec40c0af29e469d89f2454659a1a75e10fc45a4c07e7e70f6d8226b736430f4c1c0b5104ed8868b49455bca393c162e74ba311422290a0666c5deff6cf7f139f2b9eb4b11ba8685f343a01c5fa7595c887919e64278b19519775af0250233c5bdd280a6cd9d4a9989e242c7bb9fb7ff56c3725cb689ae9f309815f77e97353a0868024631b2bce95953781d08246f87778f991dc2eed944d222e69d07555ba23ee4b3a1b6296593fc5a3ae6c895c4a75161c9af93b319f45f94cff7720bb541fe591729bb0e20fd4169bb0c902d543d0a61c023c2ca23daca5b2e8f3cfac8129b39a1cb1a0e1dd5a395ca308768617dc9e87266801bb9b518d08e690e8b17310c17ade29f75df249a1bf54ad0b077fb06e2d137c99eef204e5c768596446800d52508b1b3a46c14e3c8ee41b50820955d5ed9ff751c1315ae141d91da95785daadf7e2a9c7927ab49f91ead77b0dce357a64f012c9951e4a7d5b787bafba52e19cc99879c5e55ef075cc159f02438ecefddec9cf355d43173fb451d0bbbc360071ad68ecf7199a8a6c53b5fbf401cdc966f68d036bff6cb0de3f72cdd7c5aff69d5c13727e734b3d6a4723fe44865d095e5d5551618a5f6200cf72ef531a3d0e4dd068b0e97cbf311464ea882eb47fdde295ac68d71613b2c3861ac6e8b5c3d4e59e29ce5d46b55010f75e88f64d0ae81fc5c11711e84784ea608aefc22b75423b49ebd56013b48940cd856dc28271faf8ec88ba5950ca10fb1cc36e81987cda5c7ba403f1d9b56f774b8008c21a6117b3779bd4de5a6f3b4aa80cac6ca1b2ccc6d07955f11ed88db2d5164c1bb2d8319c05139e9e7fd970fb45ade53740cbbb763b1419f7326dbe6ed1c01395259c62a6f6159f60acf4cb729b834ce2128fabd94ee3b7579e12d76cfc58e4911da481a483f08b7d978006e75b49847a08a1f8681ba8a8abd35fa1ebe0056d436c8e36883cc13afe97c5e3b3194a732180e23b3168ca2e250a22fd862c4a2bead310aa46729cd04bd26fc8b374dcd3fb8154055d06f8c894a5aca9e945579d0de02c3ccd767b58bcf194d87e79c7d4ddb071f9345ae024ae6a280c2798cc134b0ca08c5fd6432707ff58add63f44a52916a1568b6b87399c6924e1ababe5c643c46822f65fb7d1a52e855b22603f50b4434315b1cf293bb5bcb4a898edb18333847d5153ec387b118d7065959966fefe8fc39aac7b2f0afc90c97b304ff2b9edb6f039e889b7ad07e9375385d72a25591632eeb3311250e622fb305a57b6d4ceec6865987846347989f8f4184619023c16f85179862cb71ef84c1f97d233c491483e1b5d582d713dca1edcfc635bb427954e2b0020b6861f5d883aafc9b84db6af4edf1afb38ff8c682262b2d8fc06e720d48158af5f93eae55ddc1c686fd0d5c94bbbfceb0a63c801568ae85c122e62bcd7ca99e0e9f9cc072fff20a1770c5b3bbacf568aac41ae0dcd28dc9987202e891aed5cc7862ca3c6316d12c0c87359a8f383eb37d45f4fb01be867c672ce7b07994ec1202e15185b7f955281e8359dbf2c63da72e73a24fd409f0922dd73aea9c7b99a3fc1998ec516b0321a0628806f8abc863436885bc6a1c498f4be73516a914db58d8da986bd59af9f06dfec3fbb2ee6664e06f0aa555d45d96704237580b82e3612cd38535116abca2f9235b4154895578c25cb36f769476444b76b055d04b556717224a3ab888daebd76f1d9c3f8f42215c016331428fbd533169b5f465b272efdb3909e9f408f5e0abd8e248ba17804483adc2b6aeb443866edead977c2b4d6a494b63727a2416aedc9559bf0f35f075a1be79191ebe3196a14988c3d76ec3821b8d14cd10a545527c572f33e346160f998d2ff138fe5e1ee94c4f4aead518ae4006804fb5a052dbe637fafa74466c43c78ea06ad34fd0f1a55c6e60fb861bdbb9795a54c096737d635287f4e35268fdd66c898e772edf077bf2f3f22c515280e6ed3f280a74c6f7eba0238ba8c87ac6d5f33d70c187b0fde56943083d0dfb68f8abcac5ffef5338aea38a7f3d20c1b6e8edec5c4b7ab44302e90c578aff5108697215cff73999757fea522f596ec3f0e1e7a0edbff0e64d8e3d0080cb1ab263466a6382e4583528b07e487c8acf49f75322c19969359d5780cf9a51cdd1afe300059d5778983166c2b7f3318931f0c0415d28056049fa4c6a2f1ebe91bf37fbde13a4419cb9aacd2b7cb48db1d90e87021453a6f33bd2c512dac92c7bf8c10bf8c82b75cf0ac4d51bf6a8d4069aa3c9448c86a5a8643623fedc53c8672dd46ae3644f235ac549f8626b001a1de0feb69fd46a27275e601bff664b29a3b91ed160a098fca5485aeb9ea18d732a5b04dfc6dbd840e680f13e24c3609d1084ea7da82778f56a26afcf714f4535de6ab529dcaaeb9edfe071810fe98e16eac6d4bdd071da3dc75eac64a59afff4f34352a460ff2e8fdc40b8d55cb4f0fb3434c7accb7a537688a9e1543c5228c36f318fa2d2511fb96741eea57ae7c6540f7e2066dad867e2f415d8867aec10fedb135a724fb36513ebfeec8ced731dc37cdea907f29b97d09e3b35c1bb87cb5e3dd3d0940d3154e6d15a0cec26d1712a4024b8e9b00bfe47afe92c7e9e051383440c3d54a9bb8eda3a028133a3b99e14ff4404ed04a7ff00c9cf1312c9588b62fe579386296c8d5dd18c6bfb41fb3ee778d1631a43b4a17adc6ca0dc631eaa2e7fb9b8b86e8091d1faf3674427ddfc785842f944d6572b9de1395ce7661fbde4d37cc8b20c48824c354b18552befb030cbea467e9326ffbc35436dd4d397ee616953c4bb1a6a00416c96661857a98d1c4655c4498190272904a3489485703099c3aefb9d9ff8fb14fe4997c6bd8f6a65c16a9a784e9d170f98ca7a9d48f566f374c1250954c724a35db858eb7f8743abee2c1bc3e455736c4d85645c673fa2673240cf8aff938947d18478c3febc089678f04726fe60c4394f1682bd5a7f5dfbe98a2c1c1c71a5577d4d30bd4e3856e164e3ff4d5a4702f7726b7943fba6fb1756e014464a2cbd6f4ab40b7d31e8072d22365361a9cdae2a078c5987680688e0b08758752e976b94b6af31c3b73c4b261740b5b1809a0650dccfd8733ad0a1f312fc0c3dc15cfcd402176d5bb3c9d82502b7e7bc165b7bed118f338ab03bf9ce21ca90e6530d5e270aa56f5d4b1eb1922a8835255bb356b589c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0xda4}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f00000040c0)=@delchain={0xd8, 0x65, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xfff1}, {0xa, 0xffff}}, [@f_rsvp={{0x9}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x9}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_DST={0x8, 0x2, @rand_addr=0x64010102}]}}, @f_rsvp={{0x9}, {0x64, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x2, 0xffff}, {0x3ecca6ce, 0x5, 0x400}, 0x2e, 0x82, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x6, 0x7ff}, {0x3, 0x9}, 0x67, 0xfe, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x8, 0x8}, {0x4, 0x9, 0x4}, 0x6, 0xb}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x754c}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m48.744170827s ago: executing program 3 (id=36): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xab) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6, 0x30, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x0, 0x3, {{0x16, 0x4, 0x3, 0x2c, 0x58, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x46, 0x1, 0x5, [{@local, 0x7fff}, {@empty, 0x9}, {@broadcast, 0x5}, {@loopback, 0x8}]}, @timestamp={0x44, 0x20, 0x1b, 0x0, 0x7, [0x5fd9, 0x5e0, 0x6, 0x3ff, 0x0, 0x9, 0xf7f]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250b00b25352aac124e2007971202e442500003000018008000300010000001400020076657468305f5503ca50bbfcce9b08028c72274cfcb7d2e191c56fadc3c225c69c889316d6c19e4f87c649d59cda51dec24c44d20767e89581ecd85839de6cd1ce47ccade55d004f976a07f201b81907cf0d4d2025afed94c2fe9ef61ad145fcded8d8cde5bded92dfbfdae43c2341d54efdd14f2d9e5bd422a371e178d39da02259f21bf34a971c519f43c03d2693ab704200bca0a6a565320b65c3857572cc125d12", @ANYRES32=0x0, @ANYBLOB="08000300030000000c00018008000300000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="1c0001800800030000000000080003000100000008000300020000004c000180140002006361696630000000000000000000000014000200766c616e3000000000000000000000000800030002000000080003000300000008000100", @ANYRES32=r7, @ANYRES64=r2], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001000010229bd7000080000000a000000125edf0ef450af69edd014707da9431c425549f1d39df75390c8d1d85f7f2726dfc21fcb0213433b3fe9052edc043646d072622b3c6fb47d0e01b269965db81233b687835e2daf4613d19119da34842c7e0fcca51493d7adc6e607b43fc4c2221e3b7274d56622739824c6ca08574eadfd096acce1ae5777a5364ba64ab8ebfd2416dfe5d45adaaaf3c9ac2ff845c6f0a2ae5a898391c0aca48d040e9cfc0e7a1be671a9c14d6c6016987b7093429f60076ea2785c16dc74c66cd845c8882f8f54e986a643397a312bfaa900"], 0xe0}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x4, 0x0, 0x80000000}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r8, 0x3, 0x3, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x989680}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x240, 0x88) fchmod(r9, 0x24) 1m48.743784297s ago: executing program 32 (id=36): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xab) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6, 0x30, r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x0, 0x3, {{0x16, 0x4, 0x3, 0x2c, 0x58, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x46, 0x1, 0x5, [{@local, 0x7fff}, {@empty, 0x9}, {@broadcast, 0x5}, {@loopback, 0x8}]}, @timestamp={0x44, 0x20, 0x1b, 0x0, 0x7, [0x5fd9, 0x5e0, 0x6, 0x3ff, 0x0, 0x9, 0xf7f]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250b00b25352aac124e2007971202e442500003000018008000300010000001400020076657468305f5503ca50bbfcce9b08028c72274cfcb7d2e191c56fadc3c225c69c889316d6c19e4f87c649d59cda51dec24c44d20767e89581ecd85839de6cd1ce47ccade55d004f976a07f201b81907cf0d4d2025afed94c2fe9ef61ad145fcded8d8cde5bded92dfbfdae43c2341d54efdd14f2d9e5bd422a371e178d39da02259f21bf34a971c519f43c03d2693ab704200bca0a6a565320b65c3857572cc125d12", @ANYRES32=0x0, @ANYBLOB="08000300030000000c00018008000300000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="1c0001800800030000000000080003000100000008000300020000004c000180140002006361696630000000000000000000000014000200766c616e3000000000000000000000000800030002000000080003000300000008000100", @ANYRES32=r7, @ANYRES64=r2], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001000010229bd7000080000000a000000125edf0ef450af69edd014707da9431c425549f1d39df75390c8d1d85f7f2726dfc21fcb0213433b3fe9052edc043646d072622b3c6fb47d0e01b269965db81233b687835e2daf4613d19119da34842c7e0fcca51493d7adc6e607b43fc4c2221e3b7274d56622739824c6ca08574eadfd096acce1ae5777a5364ba64ab8ebfd2416dfe5d45adaaaf3c9ac2ff845c6f0a2ae5a898391c0aca48d040e9cfc0e7a1be671a9c14d6c6016987b7093429f60076ea2785c16dc74c66cd845c8882f8f54e986a643397a312bfaa900"], 0xe0}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x4, 0x0, 0x80000000}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r8, 0x3, 0x3, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x989680}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x240, 0x88) fchmod(r9, 0x24) 5.049342133s ago: executing program 1 (id=897): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x757, 0x8, 0x1, 0x8, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x62) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000100)={0xfffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x58}}, 0x404c081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) write$binfmt_misc(r4, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r7, 0x0, 0x4010d00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000c217ba619700"/18], 0x48) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 4.142373003s ago: executing program 4 (id=905): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x7, 0xe60}]}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001"], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='mm_vmscan_kswapd_sleep\x00', r7, 0x0, 0x2}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r10 = socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) writev(r10, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b5080000000000007b8af8ff00000000bfa2000000000008000000b704000000000000850300000300001aa4d0c76db178478abc3604009500"/84], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) 3.971885078s ago: executing program 1 (id=906): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x7, 0xe60}]}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r7 = socket$caif_stream(0x25, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b5080000000000007b8af8ff00000000bfa2000000000008000000b704000000000000850300000300001aa4d0c76db178478abc3604009500"/84], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 3.95685341s ago: executing program 4 (id=907): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4060, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) write$UHID_INPUT(r0, &(0x7f0000002940)={0x8, {"4fc565485edfe4a4c00a2d12f429dd6bd33f58b1cbba6497a96378591a6f49e1591f09c1e53b3feef0c3c4ac191b08310e4dddd3edc47c44aefa798aea7537673ca51e4532afe02e783ef5e4edceb9033fa9952e7855a87b7061c485fc9f0675de6b4934eeca3338b3c4fa486b8b36209015c24ae3b9dfc0ccfefbb80f428f62483f5e6608fe7080b1c0057a39285f7db54d9d1c55fb21fab7b185670f800b9977ca4ec83547b4020d61602c5063576bcc8414f30e3908410f547eeb8fdbba97a34ec9152d4ecc86ed9e38b8d33c95f0779df6a0aa0c2c78d9a135693d9ce30ea399977e56820b28c3ae853d431a4f7ebe6e0660e2afb5716ee11975bd4983d643de7131b42bf929a9b66a078e88ad4bd36c0e0d130286ca456f4be6ea23b0c5b2d00f4c788b569ecc006e06d91792fc7f0b56169b55bdf5a1eb41131f1eefe2770efa6e99c016c313e298ac0ba23ae7eefe6d40312f1d9206df1cd7e0903a6b4b9cdcf23785b3460d95d036f1e1ad7f2a8a25b8cc3d220c01db38aa42d25dd7a72054a340d8ee9b84e9839a205489ed3477fd16dc406be8c03b763d8623886cc198b9c3424906dee39cfbad919f59bab67191dd7cf6f28e1215913fb9e5d215a76b1c4141fa2e2d18f6d7dff2d7116b0b5658de84d4c550f48a895bdcc4aedd80c9c845aef17d3fff8250732473739c7521ae833208e8f1bef27af37e088ef2ce1e5aa53b5ce56beff6532218cc618eb86b84bb58a2782c6c728d5196978dfe8385c96748209b08251c7c735a57e264cb61f06acc1c285b92fbd3a1a566b03ec5727c43384cce51da893ed0dbc63e303b85c4c204a7fb911b8900563c664d89ad5446cc2016d4de9c34f11101befb0daba34da8ad9b1d5ca986efeaa63bc2069e334b0af30c2c13cfc68752c54b036c2584f34267bd1d9d95fd736e0f57bcc59352bc2fc6bd6fe427b520630c4026c71656c63119eac4773fa822f84c9715382600a680a7b02fa6530c5efdcbf006622b6ab500fa21bafa2c14aee72281395aab69bd61ddf5547711f905c2843b42632b1de51d40d0ec34f185e960f4300cea67c4eae3cae60af6521e1fcb56d6735b77e21269df449df4bf6de1e2fed26404dc8281b209242866caa52b608e2b88059b79257474759875a95a85ba103d6685fe62df46ecd845eb09173817bcf5e56fadccd35ef3eebd3c33f4fffb195f9d810eacb678edfed1a54785918edee9b220f6bb625acea6e01a4de81bdc35b283aedebbefc6330339e95d188dc80138384111f54ae760b001cdfe10d9a771b42d7b7a1ff38d027d81307f2da97e10493fabc30093ee5fe44f76c3438d00f346ac7264f349fdb7cc31d20c0fde14d9f91640c24bb872bdcabc30818cb6a0cf28c7ad83800df6d8e9bc3ee3afafcf3cac6f6ed1a87f9aa249dd14b287368be60da803fbe4e1276746aed0d1ec327a004debc35cf8a167dabd751d0ce45ed8b128ec1bc6942353630e71b6eb964dd3b90f3d6f5b34600586cf741cf1540007253c0809ce64bed466f1b498f8faceaa2d83dadba7ace5114ed5c904dd840ab71f4be8b38d08720fbad859ac33871617c87bed55ed93670f1a652a3e18d5d627266ce735a6bf23ab7a6aae0636ca5c753318164e10ce25bce35c5fcbe430ba332fb277fdb48d3982332e02dc563de0b46eafe468013fe2f834fe0e9cb97f83e6e55dd3ec000accb40434c2ecabb5558ebeef545716b29bf698d428db59fcf9854f9bffb5730e56ac7fe9dd8cf608de7cebd394ec3277c274b4f586513c571dbf26f87102c18dd84657112d05cad2eb43cb0dd4bf59c216fa122bbded78f3e57f11158511c3027849170a63c8296ae129c8b78b18867c941e751e099eca997e7055f36ae9d819963dfbdb478616f617854367a03427b381fea45226a61de15ac2db3a6e41a09190b0f859cc1c23fc4f618d93a65f969f72515458cd181a146914ea2c80c9d76e45713343ccf5e344366452af7183aecb34972012e05860bb846cb39a9e14b1ef151295284768e31c487728142125c988eb2c70f16b36d05538f9130b31f315b8b7cff605a456214a0e62cf977ec9a862649a5ae54e0fd4c6918b41429e32120678cffad1be85f3e6c4fbbd88dd10aabdf5b65d81b6dc9ccfb04f30194f0f0c2504c5f23526067fe6d52e0965a33502547b382aa788f14857d3df8a777f38b2a2bfcec643fecafd5608be782855475d7c753614d43be454e00bb05290640e9893736d07315ded4e7968ba1cc4623b9158b33886d9f0f90d4d82fd92eb6a9c1808dbe8455222f892505c5a10c6fdca3941f96b6d6d76d80081d500897aaf6df4baf3d660c60eb8af68e82324289bdbfe3874cc41a860bd49e44b5ba15bb83fe76da09a89d5abd8522f65b2ef8d7645c1970164e75e2c24edeed467c210c8af2d3b97a605ca9d9ebde76d017501601f877dc7d2352043bc2cf87134ceb7cc2489cc0ede0509eb84d9313bc5a35791ae0138c25c2b599ca2b6ae19f3ad3585929ee44029e4605d0d197c841eff1582504eef1d38c401d2df8502ccbb8cdc52a340cf09806ded9433a79ee692cfdecf95eb4e9957a3ee1f57c6f6dc585a78ddc956b329f41ff16031ed335df784e67d96855a0827628d839a446b388fb28ec723c96a9e0b4ab4debaccf9904d0b67abc45e2f02ed1402409aec78cf6e7095d8c1cdb28b1175d136a042e1aa9db8159235e988d868f46964d9522ed93e178e1174f5947570a8882e76b461698fc2418fdff3696c44edb07bc9baadf240ed5dce16d75147fabdb37b4f213d4f61fb68705e4e9f8decfed2e3b8b327fc572df5ca388ecdeefb1601162600625dc4e3403b7bf0bd632ff1e5614c405e9def5f416b429e164a588472c280bffe254108ce5a4f1a8a11b11a4f962e62527698293009970906be143e6857f42a93659c520aa5fa06a46a6366bbfd68f9382927d46d11e19b631d93296174133d8bf299e0378988874b6a8675d6cefd019e828d10d4f68abc8a20fa5c88940280199a42f456c4ca7845a2c9b3d3a62712a0d81ac58ba05d671dfdc83112cd3df1f4364796c6dd353e42e89fe6b0b58b814e92fc2e1c232ac95cf5df9a5256b252bbe8f60379caa2cca9cdfc4998823cc3365ffc7b2ddda8e7ce52b19710a80e1916070207eb280857d0bdb568348c7cd1f63ed8dcabd565184276eeb20d8b93219b4a217fc9d0c970039a30a476bf5f0a4cbdfe1f9c7f23e99058ed059dbdb47ca5118d7cd5872cdaa07a31b7b197af6e9366e752d07e878bb230167bb8ed5315d053eb998a509015d0d8f434822583ec9cc834541f2f2fc615836f6d5140d79a35fecc7f651c131a5ebf48edc6042ac1577f9fce66c9276cc8754fe6d3e3e87a86bc81a393244579dac3e4fb2f6819054dd5261e47fa049981c50fb647064dc5f832a7f994218bab0075a0b6506a9434cd4c90c0748f33e96736089146e2a3bede4517e3abb3a985d184586d1dec9a1e8b4a9b84ca9c940d6ab417b128534f3553846a6326f23bd7e9bb66b4d7ab9486e8857898dfacf5bae3e132869ed5cf5d7b94f6ee6ee0bfedf1aa6a5716e6ddc1fada61af913dc65ee67342b9d2ec73c074db8040af7b728c55d5459e806677626ee6feea4bec5e7e229a38e53200b8ecbdf56250c32fcc27199e2fe95e71a17a122781e064c3de5d03cceff64ba926e64a60ac74909b20ec2a447554ce9e803537245e0eeaa8ba2964b644bbaf46c329e698876e28b5e4b17d798f9e7d01463af11ee6b2ac2b2e4b38ee014c532393ad6bea2730c44101a903e42bcbb4b00086ef2007150a76bdefc8949f022a63a71f26672cc849fc177f54eeacdf5f44e441416c56ebda367034a5cbe1e101206cb4b8ce3ff1499514d9b03467eb574f65ef0e6e49f604835959d5b1ec7982159c89bd301b3e7615eb37a382c8e33c2a571df078c2131299aa1be3d044bdaec83998a9f0ddda7a33096f2ce3bdda3c0fafaa207057ae1d576340df066c55468f7f8e6a70eee91353432f3bd8026d71aed2af2a96d10d2528480f9d07503c74f1923cc533a74bb12e34e1f7347065b5aab372a4488048f4b384b144184a1212831a2647c4a1339517835ba4966df5525fb4568fceeb58ecb04196e294f4488cd017178edcb771033c40ff242c238372d7102f769f3e4660f308162d73517d0c8b4a3684bc9f6d311d901baf118165065524fe9fc63692927068dff4a3d57fc347be6afec20fe9101faf4af78ac7104a1b25ba89deec86ec4d2e969fbfeaaef1a5155e22b567de178f2f5acf76683ce4164a6ad54df08fcdaaff526eac130ec6dfe83662075c6dc6bc1e7ba03c3e62a949e7c5e34575a8770e4174244495e52d8b45032e8ad47da1592f4cfc46bb4400db166713e209cd96080e27116e5ea142410c4d43208440eee51639b9085f662352b38c1726e33888788c1b5539ed4351296b284e248930c46740d9868ab6ca788ae6880d45afec1ff495a6f5dd7ba0f60b4c714bf21eaf87b9d85a34117d53b92d4b293e10bd1c35e19a44cb13226e2c98bd5a902214cee180e0335ba3c8201b8cc1815ae3ca8a16ec47f5d2f3cc31acc97e0b9727345f487621e659844252810982af89e475bb153e6ae739f9d71a33ddc990a4b10fb1c8edf7327bcb8b9e5ef22c057f29cb7155d47ef8ee6e7893a08c3671d20216398ce52953401a8b7353aa2129a2b8f236a336f0c447811d408216fe9f932336be3e8ce7f1a88c2fed35927b53717880d800fab304fee9c03d599d65d3982f207fe38140b1a9d9519bcb9a5efcc6053496d99801fa0afec60e2f5ceb5c7df5015d6c92e7b8ff1314295201d38b99a5d3a78727a81fdff2e0fd5af81850f9fb2fc23f6323d07ef84aed4fc8ba76071dff44d8cfc87662844ef2454b6a105ce65b6f4a69c391783b78d719e00b61a3116b09826531254ba5b6daa436b30846fb1660a19947ec8b40e91e9161200eda837f210f890c037a4ecccf229820118c405678f8553d8f135c7d49f1430c3f30e3f86fa5d10425a5cc48972aa828b1c11e96fc8fe6f02d096fd47fe9c48bd5370895a8a9f5c51ef6159a4eba11151fecb2a203555381e84f0e91675ba7d0887e80a9220c6d2287b1933b20934bf19d09d85698673054837a6725a453a4083b2188bfee29e2d4ae5ebce8187bb4d0c0042273fa52f813a13648606f571722cea1f29e796cad060cfd94f841b5980501166d227400b774a4659a36e1d970602c3202c9c6cb4e8a343edd998d2e5b16fd978c5ded29ee08827fc2eb7144f8d88237401fe4e8d78419cb667eca01850959862c412f70c23fb7b001702e658abec04ef5e73654363f3dc907e1e02addd26b00f93307dbe8e44115f8a185fc6ec15f214a5d8b5a929a08a235cbaae1af9e9d6145b2daf0850460c86ded6424eb2a83948ca8ade8d6dbc321d6a1814867d023fc6c67de1ecbdb1ea238671b583dc09e04626db741c03abae12628c445243875398d317210049f9d523c329913bf5070c6d54aac6ce62842f2f3fac6308a15da3e37c24bd3533614c9e92f3bc29cdd7279f759173143bc5a225389e28656b6b5f2d8b1dc05549faf982c812ed430ec777a9746236fb4bb728d25d8907e3e43f85b5282ac480c00340d907865288d58dd03cc2236862ae9128045d01bce30555577389e8b76d090832ce090d1ccd511a2ff5ad3c95618e21faa90ffca277ddbb8bb7eb8279a7706be3514f530a8e454da88ff3d0bd6a35f", 0x1000}}, 0x1006) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x1, 0x40, 0xffffffff, 0x0, {{0x30, 0x4, 0x1, 0x11, 0xc0, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x13, 0x0, [{0x1, 0x9, "eedeae03faf893"}, {0x1, 0x4, "13c9"}]}, @end, @cipso={0x86, 0x67, 0x0, [{0x7, 0x7, "690b0ba492"}, {0x5, 0x5, "7bc2f9"}, {0x6, 0x12, "49d7906ef3ef32734ec49dc8f98e8265"}, {0x6, 0x12, "4b31b33280184ddb14b6bd71010bae41"}, {0x6, 0x7, "e43cdc1e2b"}, {0x0, 0x9, "e04cfb9c2b84db"}, {0x2, 0xe, "aa3cc7ecf2645c1e516c23ac"}, {0x1, 0xe, "dbeb6aa1ed3e30c36604cc4e"}, {0x5, 0x3, "d4"}, {0x1, 0x2}]}, @rr={0x7, 0xb, 0x7a, [@broadcast, @local]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xe69c9948}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7f93}]}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x0, [0x7, 0x4]}, @ra={0x94, 0x4, 0x5}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000001d40)=@delchain={0xbd8, 0x65, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff2}, {0x8, 0x7}, {0xd, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xb94, 0x2, [@TCA_FW_ACT={0x330, 0x4, [@m_ct={0xd8, 0x14, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x7, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x31}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x30000004, 0x6, 0x3ff}}]}, {0x6d, 0x6, "b69ba972bb7d98e339384bab25d5220853bec9484bad8068e466e3c6df7d47d08b3b9a0b6d2015a6c6a26560eb032b3c60f44b164d805ecf1059e3c041093ae30b6d8a4b32d7ef6f10ae7691cc6d8827530cc73d5cc40977f4bfc35c2ced028ea8eb49358ee99cc981"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xfc, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x393, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x3, 0x0, 0x1, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16ec, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1830, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe83, 0xffffffffffffffff, 0x3, 0x718}}]}, {0x6d, 0x6, "2a8d736f77762998a2af6bdf28671dcb4f26d88b79279bf62dcbbeb63f8efc09f62c47678cdbb75583274ee279b23a7e76cf14bfe7b3a7feae47eb511bd885e21fd61cb918946876c18b613e36b29e6de0fa92ee94cdfa6953fbf4010dce2fe866203317df124e143b"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x158, 0xd, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x45, 0x6, 0x5, 0xcaa}}, @TCA_DEF_DATA={0x6, 0x3, '%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, ':*)+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x7fff, 0xffffffffffffffff, 0x5, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '{\x00'}]}, {0xd8, 0x6, "3a352a05f32305fd9f73adc8f0d948594f39bd5f9a8d9f885d86c98ddd073361286692aecf17fa56ccb3aa11b6c585b57e1d882dc69e22b5c9a940efdd05e14e59386455d7c14fd86acb718ebe6211e93d844bfe926c1f9d2e55cb06412312db17e1a694c309b7a37d74605041496651e41308156c938284fe403b705496171cffb2be68e716b47f791c2fc51b7c871a2ebc8d82b8e2080e33c327c74e4115f3822588af8454566d7073652f6f55619162c516e6f706efefd8574052b74f4c56b43960ab762124f8c0c2ae45be4c10280c54a6fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xdf83}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe, 0x80, 0x1, 0x2, 0x8, 0xf92, 0xffffffff, 0x7f, 0x10001, 0x1, 0x7d77, 0x1, 0x6497d983, 0x2, 0x8001, 0x0, 0x81, 0x1, 0x9, 0x8, 0x8, 0x9, 0xf, 0x5, 0x7, 0x5, 0xfff, 0x5, 0xfffffffb, 0x0, 0xd, 0x2, 0x6, 0x7c02, 0x1, 0x176, 0x0, 0x3, 0x5, 0x4, 0x3, 0xb8, 0x683, 0x6, 0x2, 0x0, 0x3ff, 0x2, 0x0, 0x4, 0x1f44, 0x7fffffff, 0x7fff, 0x80000000, 0x9, 0x3, 0x7, 0x1, 0x497, 0xd018, 0x8, 0x8, 0xffff, 0x6, 0x2, 0x9, 0x6, 0x10, 0x200, 0xf, 0x0, 0xffffffff, 0x8d00000, 0x81, 0x800, 0x1ff, 0x3, 0xffff7fff, 0x101, 0x3, 0x80000001, 0x2, 0x2, 0x5, 0x3, 0x81, 0x7, 0xf83, 0x0, 0x8, 0x1, 0xc0e4, 0xa207, 0x8, 0x3, 0x1, 0x2, 0xfff, 0x6, 0x3, 0x8, 0x1ff, 0x7, 0x6, 0x4, 0xfffffff7, 0x5, 0x2, 0x7fffffff, 0x3, 0x400, 0x8001, 0xffffffff, 0x1, 0x2, 0x9, 0xfffff525, 0x0, 0x3, 0x7, 0x2, 0x2, 0xdb0, 0x3, 0x5, 0x1, 0x101, 0x20000000, 0x80, 0xfffffff8, 0x8, 0x2, 0x88, 0x9, 0xda, 0x10, 0x9, 0x3, 0x20, 0x4, 0x3, 0x6d9, 0x7, 0xbbc6, 0x71a, 0x919, 0x5, 0x0, 0x9, 0x37eec5da, 0x6, 0x8, 0x7ff, 0x1, 0x2, 0x7, 0x1, 0x80000001, 0x1, 0x1, 0xfffffff6, 0xe8c4, 0x8001, 0x81, 0x10000, 0x5, 0x0, 0x4, 0x8001, 0xfffffffd, 0x400, 0x8000, 0x6, 0xa776, 0x6, 0x8, 0x4, 0x1ff, 0x40, 0x1c000, 0x4, 0x3ff, 0xffff, 0x1, 0x5, 0x5, 0x7fffffff, 0x4, 0x1, 0xba25, 0x1, 0x2, 0x3, 0x3, 0xfffffeff, 0x3, 0x3, 0xbcd0, 0x2, 0x7da, 0x3, 0x3, 0x7, 0x36, 0xffffffff, 0xceac, 0x4, 0x1, 0x8ff3, 0x0, 0x8, 0x0, 0x400, 0x457e, 0x4, 0xffffffff, 0xff, 0x80, 0x0, 0x4, 0x5, 0x80000000, 0x80000000, 0x7, 0x8, 0x6, 0x939, 0x2, 0xff, 0x8, 0x800, 0x5, 0x80000000, 0x2, 0x7, 0x7, 0xfc, 0x15, 0xce, 0x80000000, 0xfffffffb, 0x401, 0x8001, 0x1, 0x7, 0x8, 0x7f, 0x5, 0x5, 0x6000, 0x80000001, 0x4b3b, 0x7280e92, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x41}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0xe, 0x3ff, 0x0, 0xd4, 0x6, 0x5, 0x8001, 0x5, 0x5f, 0x2, 0x3, 0x6, 0x8, 0x2bc, 0x5, 0x800, 0x0, 0x5, 0xe, 0x7, 0x7, 0x6, 0x10, 0x0, 0x0, 0x4f3, 0xd0, 0x3, 0x3, 0xe, 0x2, 0x2, 0x5, 0x8, 0xff, 0x5, 0x6, 0x989e, 0xb, 0x5, 0x3, 0xc21, 0x80, 0x7fff, 0x7, 0x3, 0x2, 0x40, 0x5, 0x9, 0x6, 0x3, 0x9b81, 0x6d, 0x571, 0x7, 0x2, 0x7, 0x1000, 0xcb0400, 0x9, 0xffffff01, 0x5, 0x4, 0x5, 0x7, 0x5, 0xc, 0x5173, 0x5, 0xbf, 0x2, 0x3ff, 0x3, 0x3, 0x4, 0x6, 0x3, 0xffffffc0, 0xec, 0x4, 0x4, 0x6, 0x0, 0x5, 0x8, 0x401, 0x80000001, 0x8001, 0x7, 0x1ff, 0xb07b, 0x47a, 0xffff, 0x9, 0x6, 0x5, 0x0, 0xb2b, 0x7fffffff, 0x3ff, 0x5, 0xffffffff, 0xfffffffe, 0x80, 0xe, 0x6, 0x6, 0x5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x90, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7ff, 0x47, 0x5, 0xf, 0x828, 0x5, 0x6d, 0xfffff001, 0x1, 0x6c, 0x9, 0x3, 0x3, 0xdae, 0xe0, 0x5, 0x4, 0x10001, 0x5, 0x10, 0x67a, 0x5, 0x0, 0x2000005, 0x80000000, 0xe, 0x1, 0xf, 0xffffff81, 0x0, 0x2, 0x8, 0x0, 0x5, 0x6d64ae73, 0x101, 0x7ff, 0x0, 0x6, 0x400, 0x80000001, 0x539c, 0x80000001, 0x5, 0x9, 0x7, 0x4, 0x90000, 0x5, 0xf, 0x0, 0x0, 0x6, 0x2, 0x5, 0x0, 0x7, 0x7, 0x9, 0x7, 0xf0, 0x0, 0xfffff800, 0x8000, 0x8, 0xe2, 0x1, 0x7, 0x2, 0x24, 0x1, 0x7fa, 0x1, 0x5, 0xdd3, 0x8001, 0x8, 0x1, 0xfffffffa, 0x6, 0x2, 0x3, 0x2, 0x6, 0xcf, 0x1, 0x90, 0x5960000, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x7, 0x401, 0x6, 0x6, 0x491, 0xc, 0x4, 0x8, 0x1, 0xffff, 0x8, 0xfffffff8, 0x5, 0xc, 0xb163, 0x0, 0x0, 0x3, 0x800, 0xf, 0x7d, 0x0, 0x1, 0xb, 0x0, 0xd, 0x9, 0x1424, 0x4, 0x101, 0xfffffff9, 0x6, 0x1, 0x1, 0x7, 0x10001, 0x0, 0xff, 0x3, 0xa0e]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9c, 0x1}}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x20040801}, 0x14) 3.820231921s ago: executing program 1 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000c3040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='adfs\x00', 0x220ac08, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) fadvise64(r2, 0x7f, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x180c081, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") 3.557026115s ago: executing program 2 (id=911): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000005400e5010000fffd00007c6685195c7a96419a001a0ee53f0000ebff0000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af24cdc7d28277c188f6e073db1d985660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) writev(r3, &(0x7f0000001140)=[{&(0x7f0000000080)="e8dffca4c6d4d2e98f9cc9b328d6af2119132d166ca3a723cd22a5ddd579eba3465cc7dffdc146a44fd77efd531fb1361a5d9f1bcb754326924fa139b0c590859c59e1a3261de18296be90ab353f861e0c972f46e01bf2172424e000feb234b33f013776f7318572f148ad950694e81e5ed859981a96e689d6b9b7e5dcb4c91eee0ede74ceb923ef086f066c699190d44b3280645aa6e095c4e598e4e7e3e588947bc1c0e571ee3cf7882bd698a3dc1bfb9e4ad033b39ff742999c4648f8354ead4374d0e5e8a90d3075701d0a7e4de8151088d1be4285a511983fc7d935d867eb57818f0d262ccfe39ff25758a355c242cebe227c00ae77cb2a4eecc6607b6c3611b33700d0608ccde4141cad348f2ddf6d8f708d61030397a63d4b75df3ead6a18359fff9629b681b54ffbe141b28ece6737a1fd022544e7b9dd3f050ed1f3e46074f167ecf8aa5033002e08421592525d7174892a76731dbdfc740af777a98b4ab68ac707f412070c9a0bdd7a1ed1cc94fde0c67f21d29de52aa5da334f7ed1e6309def0f06baceb098fb338a11f7c88a05dd977d70072935a6d1e8859d09aed1ca950f89e8238b46c87bd61f41c2d966359534a3e3685aceb80652e6bb44b13e60b4d07e31b791a8f640b41ac3dfb3a92cc86f53732e42970e2f804c920fce94390a55cfbc9d3781bc8fa8ae9260f931f86b459cb61a2f61ba133c539fc8518656a0d7699335e4efd7ab62a9cd0e0bfeae1b6299a227d33241814d833f11172bc800fc3f316fde29b4253629fe6941908c05990b1257e068d78a100b153244bd0d9d2298d51b423778b8e34552be08befe8d6f918fc979b049b944fee1fd714f0138485c14050fe770244ab91991bcb960232d6e2bc135adea7084c91e652e9474faa20c2370a91be37ec48c6969dc7102fb12323699096fea49c1c40fae50a92d2bfb79ff07c5b9e0db116ea4aaa0de18abb101a10c476c47c72e0bd380c411dd2cc6b916d5b00764be9a3a041a1d0bd67a4ab6070870498ed3f57e39b1ed921efa8192437c9d480377c11021de424ff993b036658182d065a3728e3726dbbbf2dedc34d9aea35a3853b7186e9b679b5789537660d6cf81351fa497f77a527fce94040ca6d29d444f4b009b6b5422a0fc864381e443071ef18e5a0f91eac0c31f992cc5dbf5f6d2bf2f2e65cd570103df899ed10fa14690233f195eb188d0bcf6fe5ed01d5cae8dcdf7eed32cc16b00bf8e9a4c5facac4c32e603886783a9f1595fb95725ad7784a8ccb13658edcc653672fdc7500b2a875ae88d957f4ec9506369e80adc86cd0a9df28bd656620bc21db75671ec1cc4c22debd389172ff45768dfb2a514a819e17724414cdda015c1f1a4abe88cb3bbdbac", 0x3db}], 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.532640247s ago: executing program 5 (id=912): r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r2}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "170733ff51a35476e887de0e7e97693acd7ce4f019de2203cca24b1e84d319ee1ec49dd55fe63eec38517ed39e174522eeffbae065e23c7519a0408aa20c23c6", 0x2c}, 0x48, r1) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) syz_io_uring_setup(0x112, &(0x7f0000000400)={0x0, 0x1000, 0x2, 0x4, 0x0, 0x0, r4}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES8=r1], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r8, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r9 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) 3.180059579s ago: executing program 2 (id=914): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) listen(0xffffffffffffffff, 0x2) times(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x800, 0xcf1, 0xe, 0xd, 0xd, 0x8}}]}}]}, 0x154}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r9, r8, 0x0, 0x80000000000006) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x8) fchdir(r12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 3.16443051s ago: executing program 0 (id=915): socketpair(0x25, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="2b72646d61202b63707573657420187eaaf3b4113b59cbc12654cf6472025d6af605b9fb070e4002b1ee129203a868d58b9ac257e9314aaf3e9b53a61ab9bb17d57b1c4de3694eed3a33fea1f3eff1c3751459a4ffa433cb21d2b0188c04a4077a248bb9d7801ecb12586c677ab55951dffe4bb2508d8055fbf3829df903f734d02de68caf36e79e2c39befc6369dce1b4d612e59786cae61bd164cf7104f5b396a303baaa5e91670e2612f5a62409c5aad7c55c8472f79fadf7f3588c9da258f7b53eefb2fcdf313b00a7a31cd26215533d8304fb52c9f3b0db42d566f9324b0c641164a8472f772b26d03b99851165392fc66594d60a430f395ecd2d00272ff1"], 0xe) 3.05567037s ago: executing program 4 (id=916): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x757, 0x8, 0x1, 0x8, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x62) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000100)={0xfffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x58}}, 0x404c081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) write$binfmt_misc(r4, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r7, 0x0, 0x4010d00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000c217ba619700"/18], 0x48) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 3.000486004s ago: executing program 5 (id=917): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x7, 0xe60}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001"], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='mm_vmscan_kswapd_sleep\x00', r6, 0x0, 0x2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r9 = socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) writev(r9, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b5080000000000007b8af8ff00000000bfa2000000000008000000b704000000000000850300000300001aa4d0c76db178478abc3604009500"/84], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 2.963079918s ago: executing program 5 (id=918): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4060, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) write$UHID_INPUT(r0, &(0x7f0000002940)={0x8, {"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", 0x1000}}, 0x1006) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x1, 0x40, 0xffffffff, 0x0, {{0x15, 0x4, 0x1, 0x11, 0x54, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0xa, 0x0, [{0x1, 0x4, "13c9"}]}, @cipso={0x86, 0x6}, @rr={0x7, 0xb, 0x7a, [@broadcast, @local]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xe69c9948}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7f93}]}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x0, [0x7, 0x4]}, @ra={0x94, 0x4, 0x5}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000001d40)=@delchain={0xbd8, 0x65, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff2}, {0x8, 0x7}, {0xd, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xb94, 0x2, [@TCA_FW_ACT={0x330, 0x4, [@m_ct={0xd8, 0x14, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x7, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x31}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x30000004, 0x6, 0x3ff}}]}, {0x6d, 0x6, "b69ba972bb7d98e339384bab25d5220853bec9484bad8068e466e3c6df7d47d08b3b9a0b6d2015a6c6a26560eb032b3c60f44b164d805ecf1059e3c041093ae30b6d8a4b32d7ef6f10ae7691cc6d8827530cc73d5cc40977f4bfc35c2ced028ea8eb49358ee99cc981"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xfc, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x393, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x3, 0x0, 0x1, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16ec, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1830, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe83, 0xffffffffffffffff, 0x3, 0x718}}]}, {0x6d, 0x6, "2a8d736f77762998a2af6bdf28671dcb4f26d88b79279bf62dcbbeb63f8efc09f62c47678cdbb75583274ee279b23a7e76cf14bfe7b3a7feae47eb511bd885e21fd61cb918946876c18b613e36b29e6de0fa92ee94cdfa6953fbf4010dce2fe866203317df124e143b"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x158, 0xd, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x45, 0x6, 0x5, 0xcaa}}, @TCA_DEF_DATA={0x6, 0x3, '%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, ':*)+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x7fff, 0xffffffffffffffff, 0x5, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '{\x00'}]}, {0xd8, 0x6, "3a352a05f32305fd9f73adc8f0d948594f39bd5f9a8d9f885d86c98ddd073361286692aecf17fa56ccb3aa11b6c585b57e1d882dc69e22b5c9a940efdd05e14e59386455d7c14fd86acb718ebe6211e93d844bfe926c1f9d2e55cb06412312db17e1a694c309b7a37d74605041496651e41308156c938284fe403b705496171cffb2be68e716b47f791c2fc51b7c871a2ebc8d82b8e2080e33c327c74e4115f3822588af8454566d7073652f6f55619162c516e6f706efefd8574052b74f4c56b43960ab762124f8c0c2ae45be4c10280c54a6fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xdf83}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe, 0x80, 0x1, 0x2, 0x8, 0xf92, 0xffffffff, 0x7f, 0x10001, 0x1, 0x7d77, 0x1, 0x6497d983, 0x2, 0x8001, 0x0, 0x81, 0x1, 0x9, 0x8, 0x8, 0x9, 0xf, 0x5, 0x7, 0x5, 0xfff, 0x5, 0xfffffffb, 0x0, 0xd, 0x2, 0x6, 0x7c02, 0x1, 0x176, 0x0, 0x3, 0x5, 0x4, 0x3, 0xb8, 0x683, 0x6, 0x2, 0x0, 0x3ff, 0x2, 0x0, 0x4, 0x1f44, 0x7fffffff, 0x7fff, 0x80000000, 0x9, 0x3, 0x7, 0x1, 0x497, 0xd018, 0x8, 0x8, 0xffff, 0x6, 0x2, 0x9, 0x6, 0x10, 0x200, 0xf, 0x0, 0xffffffff, 0x8d00000, 0x81, 0x800, 0x1ff, 0x3, 0xffff7fff, 0x101, 0x3, 0x80000001, 0x2, 0x2, 0x5, 0x3, 0x81, 0x7, 0xf83, 0x0, 0x8, 0x1, 0xc0e4, 0xa207, 0x8, 0x3, 0x1, 0x2, 0xfff, 0x6, 0x3, 0x8, 0x1ff, 0x7, 0x6, 0x4, 0xfffffff7, 0x5, 0x2, 0x7fffffff, 0x3, 0x400, 0x8001, 0xffffffff, 0x1, 0x2, 0x9, 0xfffff525, 0x0, 0x3, 0x7, 0x2, 0x2, 0xdb0, 0x3, 0x5, 0x1, 0x101, 0x20000000, 0x80, 0xfffffff8, 0x8, 0x2, 0x88, 0x9, 0xda, 0x10, 0x9, 0x3, 0x20, 0x4, 0x3, 0x6d9, 0x7, 0xbbc6, 0x71a, 0x919, 0x5, 0x0, 0x9, 0x37eec5da, 0x6, 0x8, 0x7ff, 0x1, 0x2, 0x7, 0x1, 0x80000001, 0x1, 0x1, 0xfffffff6, 0xe8c4, 0x8001, 0x81, 0x10000, 0x5, 0x0, 0x4, 0x8001, 0xfffffffd, 0x400, 0x8000, 0x6, 0xa776, 0x6, 0x8, 0x4, 0x1ff, 0x40, 0x1c000, 0x4, 0x3ff, 0xffff, 0x1, 0x5, 0x5, 0x7fffffff, 0x4, 0x1, 0xba25, 0x1, 0x2, 0x3, 0x3, 0xfffffeff, 0x3, 0x3, 0xbcd0, 0x2, 0x7da, 0x3, 0x3, 0x7, 0x36, 0xffffffff, 0xceac, 0x4, 0x1, 0x8ff3, 0x0, 0x8, 0x0, 0x400, 0x457e, 0x4, 0xffffffff, 0xff, 0x80, 0x0, 0x4, 0x5, 0x80000000, 0x80000000, 0x7, 0x8, 0x6, 0x939, 0x2, 0xff, 0x8, 0x800, 0x5, 0x80000000, 0x2, 0x7, 0x7, 0xfc, 0x15, 0xce, 0x80000000, 0xfffffffb, 0x401, 0x8001, 0x1, 0x7, 0x8, 0x7f, 0x5, 0x5, 0x6000, 0x80000001, 0x4b3b, 0x7280e92, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x41}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0xe, 0x3ff, 0x0, 0xd4, 0x6, 0x5, 0x8001, 0x5, 0x5f, 0x2, 0x3, 0x6, 0x8, 0x2bc, 0x5, 0x800, 0x0, 0x5, 0xe, 0x7, 0x7, 0x6, 0x10, 0x0, 0x0, 0x4f3, 0xd0, 0x3, 0x3, 0xe, 0x2, 0x2, 0x5, 0x8, 0xff, 0x5, 0x6, 0x989e, 0xb, 0x5, 0x3, 0xc21, 0x80, 0x7fff, 0x7, 0x3, 0x2, 0x40, 0x5, 0x9, 0x6, 0x3, 0x9b81, 0x6d, 0x571, 0x7, 0x2, 0x7, 0x1000, 0xcb0400, 0x9, 0xffffff01, 0x5, 0x4, 0x5, 0x7, 0x5, 0xc, 0x5173, 0x5, 0xbf, 0x2, 0x3ff, 0x3, 0x3, 0x4, 0x6, 0x3, 0xffffffc0, 0xec, 0x4, 0x4, 0x6, 0x0, 0x5, 0x8, 0x401, 0x80000001, 0x8001, 0x7, 0x1ff, 0xb07b, 0x47a, 0xffff, 0x9, 0x6, 0x5, 0x0, 0xb2b, 0x7fffffff, 0x3ff, 0x5, 0xffffffff, 0xfffffffe, 0x80, 0xe, 0x6, 0x6, 0x5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x90, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7ff, 0x47, 0x5, 0xf, 0x828, 0x5, 0x6d, 0xfffff001, 0x1, 0x6c, 0x9, 0x3, 0x3, 0xdae, 0xe0, 0x5, 0x4, 0x10001, 0x5, 0x10, 0x67a, 0x5, 0x0, 0x2000005, 0x80000000, 0xe, 0x1, 0xf, 0xffffff81, 0x0, 0x2, 0x8, 0x0, 0x5, 0x6d64ae73, 0x101, 0x7ff, 0x0, 0x6, 0x400, 0x80000001, 0x539c, 0x80000001, 0x5, 0x9, 0x7, 0x4, 0x90000, 0x5, 0xf, 0x0, 0x0, 0x6, 0x2, 0x5, 0x0, 0x7, 0x7, 0x9, 0x7, 0xf0, 0x0, 0xfffff800, 0x8000, 0x8, 0xe2, 0x1, 0x7, 0x2, 0x24, 0x1, 0x7fa, 0x1, 0x5, 0xdd3, 0x8001, 0x8, 0x1, 0xfffffffa, 0x6, 0x2, 0x3, 0x2, 0x6, 0xcf, 0x1, 0x90, 0x5960000, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x7, 0x401, 0x6, 0x6, 0x491, 0xc, 0x4, 0x8, 0x1, 0xffff, 0x8, 0xfffffff8, 0x5, 0xc, 0xb163, 0x0, 0x0, 0x3, 0x800, 0xf, 0x7d, 0x0, 0x1, 0xb, 0x0, 0xd, 0x9, 0x1424, 0x4, 0x101, 0xfffffff9, 0x6, 0x1, 0x1, 0x7, 0x10001, 0x0, 0xff, 0x3, 0xa0e]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9c, 0x1}}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x20040801}, 0x14) 2.247796971s ago: executing program 0 (id=919): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x757, 0x8, 0x1, 0x8, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x62) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000100)={0xfffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x58}}, 0x404c081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) write$binfmt_misc(r4, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r7, 0x0, 0x4010d00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000c217ba6197000000000000000000"], 0x48) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 2.234960052s ago: executing program 2 (id=920): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x7, 0xe60}]}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r7 = socket$caif_stream(0x25, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b5080000000000007b8af8ff00000000bfa2000000000008000000b704000000000000850300000300001aa4d0c76db178478abc3604009500"/84], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 2.181176607s ago: executing program 4 (id=921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ddffff7f00000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getxattr(0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)="aa", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000002c0)={0x49de, 0xed80, 0xfffc, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r6 = syz_open_pts(r5, 0x20800) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x77bc, 0x80, 0x3, 0x285}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) read$qrtrtun(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r6, r5, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13, 0x0, 0xb16}, 0x18) pipe2$9p(&(0x7f0000000140), 0x0) 2.154275399s ago: executing program 2 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x6f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000025b, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000280)='configfs\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0200000001"], 0x48) r10 = fsmount(r4, 0x1, 0x0) fchdir(r10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r9}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x20040, 0x40, 0xe}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) 2.078657846s ago: executing program 5 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b50800000000e7057b8af8ff00000000bfa2000000000000ffffb703003d4b1b5cf5464ca9972e63ffcf1097dc6671ecbfb022000000b704008000000000000000000000ff00640000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='net_dev_xmit_timeout\x00', r4, 0x0, 0x6}, 0x18) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2518"], 0x60}}, 0x4024000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) sync() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0xe6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000f3ff8410000002b0fc008400000023000000954e1000"/48], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x1, 0x0, 0x4007) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.80676482s ago: executing program 5 (id=924): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e0d, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x202, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465f, 0x8, 0x3, 0x389}, &(0x7f00000004c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r7, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r7, r2, 0x80000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000020000200130003"], 0x98}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff) r13 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x8, 0xffff, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @empty, 0xfffffffc}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 1.57898372s ago: executing program 2 (id=925): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660080070290780a010102ac1414aa1101000000000000cb4a4a2106eaee41681a792e8b8fea6fb02d341abd197cb92e47902ead536d8a00d50fca7312e5f6d4bde442439812aebaa7d4f659057e208c6ddd0000000000000000"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000002500850000001b000000b7000000000000009500000000000000ae61699ebc82785d4ed0e5bf37"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x1a4}, 0x0, 0x0) 1.329021802s ago: executing program 0 (id=926): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4060, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) write$UHID_INPUT(r0, &(0x7f0000002940)={0x8, {"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", 0x1000}}, 0x1006) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x1, 0x40, 0xffffffff, 0x0, {{0x30, 0x4, 0x1, 0x11, 0xc0, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x13, 0x0, [{0x1, 0x9, "eedeae03faf893"}, {0x1, 0x4, "13c9"}]}, @end, @cipso={0x86, 0x67, 0x0, [{0x7, 0x7, "690b0ba492"}, {0x5, 0x5, "7bc2f9"}, {0x6, 0x12, "49d7906ef3ef32734ec49dc8f98e8265"}, {0x6, 0x12, "4b31b33280184ddb14b6bd71010bae41"}, {0x6, 0x7, "e43cdc1e2b"}, {0x0, 0x9, "e04cfb9c2b84db"}, {0x2, 0xe, "aa3cc7ecf2645c1e516c23ac"}, {0x1, 0xe, "dbeb6aa1ed3e30c36604cc4e"}, {0x5, 0x3, "d4"}, {0x1, 0x2}]}, @rr={0x7, 0xb, 0x7a, [@broadcast, @local]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xe69c9948}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7f93}]}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x0, [0x7, 0x4]}, @ra={0x94, 0x4, 0x5}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000001d40)=@delchain={0xbd8, 0x65, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff2}, {0x8, 0x7}, {0xd, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xb94, 0x2, [@TCA_FW_ACT={0x330, 0x4, [@m_ct={0xd8, 0x14, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x7, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x31}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x30000004, 0x6, 0x3ff}}]}, {0x6d, 0x6, "b69ba972bb7d98e339384bab25d5220853bec9484bad8068e466e3c6df7d47d08b3b9a0b6d2015a6c6a26560eb032b3c60f44b164d805ecf1059e3c041093ae30b6d8a4b32d7ef6f10ae7691cc6d8827530cc73d5cc40977f4bfc35c2ced028ea8eb49358ee99cc981"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xfc, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x393, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x3, 0x0, 0x1, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16ec, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1830, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe83, 0xffffffffffffffff, 0x3, 0x718}}]}, {0x6d, 0x6, "2a8d736f77762998a2af6bdf28671dcb4f26d88b79279bf62dcbbeb63f8efc09f62c47678cdbb75583274ee279b23a7e76cf14bfe7b3a7feae47eb511bd885e21fd61cb918946876c18b613e36b29e6de0fa92ee94cdfa6953fbf4010dce2fe866203317df124e143b"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x158, 0xd, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x45, 0x6, 0x5, 0xcaa}}, @TCA_DEF_DATA={0x6, 0x3, '%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, ':*)+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x7fff, 0xffffffffffffffff, 0x5, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '{\x00'}]}, {0xd8, 0x6, "3a352a05f32305fd9f73adc8f0d948594f39bd5f9a8d9f885d86c98ddd073361286692aecf17fa56ccb3aa11b6c585b57e1d882dc69e22b5c9a940efdd05e14e59386455d7c14fd86acb718ebe6211e93d844bfe926c1f9d2e55cb06412312db17e1a694c309b7a37d74605041496651e41308156c938284fe403b705496171cffb2be68e716b47f791c2fc51b7c871a2ebc8d82b8e2080e33c327c74e4115f3822588af8454566d7073652f6f55619162c516e6f706efefd8574052b74f4c56b43960ab762124f8c0c2ae45be4c10280c54a6fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xdf83}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe, 0x80, 0x1, 0x2, 0x8, 0xf92, 0xffffffff, 0x7f, 0x10001, 0x1, 0x7d77, 0x1, 0x6497d983, 0x2, 0x8001, 0x0, 0x81, 0x1, 0x9, 0x8, 0x8, 0x9, 0xf, 0x5, 0x7, 0x5, 0xfff, 0x5, 0xfffffffb, 0x0, 0xd, 0x2, 0x6, 0x7c02, 0x1, 0x176, 0x0, 0x3, 0x5, 0x4, 0x3, 0xb8, 0x683, 0x6, 0x2, 0x0, 0x3ff, 0x2, 0x0, 0x4, 0x1f44, 0x7fffffff, 0x7fff, 0x80000000, 0x9, 0x3, 0x7, 0x1, 0x497, 0xd018, 0x8, 0x8, 0xffff, 0x6, 0x2, 0x9, 0x6, 0x10, 0x200, 0xf, 0x0, 0xffffffff, 0x8d00000, 0x81, 0x800, 0x1ff, 0x3, 0xffff7fff, 0x101, 0x3, 0x80000001, 0x2, 0x2, 0x5, 0x3, 0x81, 0x7, 0xf83, 0x0, 0x8, 0x1, 0xc0e4, 0xa207, 0x8, 0x3, 0x1, 0x2, 0xfff, 0x6, 0x3, 0x8, 0x1ff, 0x7, 0x6, 0x4, 0xfffffff7, 0x5, 0x2, 0x7fffffff, 0x3, 0x400, 0x8001, 0xffffffff, 0x1, 0x2, 0x9, 0xfffff525, 0x0, 0x3, 0x7, 0x2, 0x2, 0xdb0, 0x3, 0x5, 0x1, 0x101, 0x20000000, 0x80, 0xfffffff8, 0x8, 0x2, 0x88, 0x9, 0xda, 0x10, 0x9, 0x3, 0x20, 0x4, 0x3, 0x6d9, 0x7, 0xbbc6, 0x71a, 0x919, 0x5, 0x0, 0x9, 0x37eec5da, 0x6, 0x8, 0x7ff, 0x1, 0x2, 0x7, 0x1, 0x80000001, 0x1, 0x1, 0xfffffff6, 0xe8c4, 0x8001, 0x81, 0x10000, 0x5, 0x0, 0x4, 0x8001, 0xfffffffd, 0x400, 0x8000, 0x6, 0xa776, 0x6, 0x8, 0x4, 0x1ff, 0x40, 0x1c000, 0x4, 0x3ff, 0xffff, 0x1, 0x5, 0x5, 0x7fffffff, 0x4, 0x1, 0xba25, 0x1, 0x2, 0x3, 0x3, 0xfffffeff, 0x3, 0x3, 0xbcd0, 0x2, 0x7da, 0x3, 0x3, 0x7, 0x36, 0xffffffff, 0xceac, 0x4, 0x1, 0x8ff3, 0x0, 0x8, 0x0, 0x400, 0x457e, 0x4, 0xffffffff, 0xff, 0x80, 0x0, 0x4, 0x5, 0x80000000, 0x80000000, 0x7, 0x8, 0x6, 0x939, 0x2, 0xff, 0x8, 0x800, 0x5, 0x80000000, 0x2, 0x7, 0x7, 0xfc, 0x15, 0xce, 0x80000000, 0xfffffffb, 0x401, 0x8001, 0x1, 0x7, 0x8, 0x7f, 0x5, 0x5, 0x6000, 0x80000001, 0x4b3b, 0x7280e92, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x41}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0xe, 0x3ff, 0x0, 0xd4, 0x6, 0x5, 0x8001, 0x5, 0x5f, 0x2, 0x3, 0x6, 0x8, 0x2bc, 0x5, 0x800, 0x0, 0x5, 0xe, 0x7, 0x7, 0x6, 0x10, 0x0, 0x0, 0x4f3, 0xd0, 0x3, 0x3, 0xe, 0x2, 0x2, 0x5, 0x8, 0xff, 0x5, 0x6, 0x989e, 0xb, 0x5, 0x3, 0xc21, 0x80, 0x7fff, 0x7, 0x3, 0x2, 0x40, 0x5, 0x9, 0x6, 0x3, 0x9b81, 0x6d, 0x571, 0x7, 0x2, 0x7, 0x1000, 0xcb0400, 0x9, 0xffffff01, 0x5, 0x4, 0x5, 0x7, 0x5, 0xc, 0x5173, 0x5, 0xbf, 0x2, 0x3ff, 0x3, 0x3, 0x4, 0x6, 0x3, 0xffffffc0, 0xec, 0x4, 0x4, 0x6, 0x0, 0x5, 0x8, 0x401, 0x80000001, 0x8001, 0x7, 0x1ff, 0xb07b, 0x47a, 0xffff, 0x9, 0x6, 0x5, 0x0, 0xb2b, 0x7fffffff, 0x3ff, 0x5, 0xffffffff, 0xfffffffe, 0x80, 0xe, 0x6, 0x6, 0x5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x90, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7ff, 0x47, 0x5, 0xf, 0x828, 0x5, 0x6d, 0xfffff001, 0x1, 0x6c, 0x9, 0x3, 0x3, 0xdae, 0xe0, 0x5, 0x4, 0x10001, 0x5, 0x10, 0x67a, 0x5, 0x0, 0x2000005, 0x80000000, 0xe, 0x1, 0xf, 0xffffff81, 0x0, 0x2, 0x8, 0x0, 0x5, 0x6d64ae73, 0x101, 0x7ff, 0x0, 0x6, 0x400, 0x80000001, 0x539c, 0x80000001, 0x5, 0x9, 0x7, 0x4, 0x90000, 0x5, 0xf, 0x0, 0x0, 0x6, 0x2, 0x5, 0x0, 0x7, 0x7, 0x9, 0x7, 0xf0, 0x0, 0xfffff800, 0x8000, 0x8, 0xe2, 0x1, 0x7, 0x2, 0x24, 0x1, 0x7fa, 0x1, 0x5, 0xdd3, 0x8001, 0x8, 0x1, 0xfffffffa, 0x6, 0x2, 0x3, 0x2, 0x6, 0xcf, 0x1, 0x90, 0x5960000, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x7, 0x401, 0x6, 0x6, 0x491, 0xc, 0x4, 0x8, 0x1, 0xffff, 0x8, 0xfffffff8, 0x5, 0xc, 0xb163, 0x0, 0x0, 0x3, 0x800, 0xf, 0x7d, 0x0, 0x1, 0xb, 0x0, 0xd, 0x9, 0x1424, 0x4, 0x101, 0xfffffff9, 0x6, 0x1, 0x1, 0x7, 0x10001, 0x0, 0xff, 0x3, 0xa0e]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9c, 0x1}}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x20040801}, 0x14) 981.904383ms ago: executing program 1 (id=927): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x7, 0xe60}]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001"], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='mm_vmscan_kswapd_sleep\x00', r6, 0x0, 0x2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r9 = socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) writev(r9, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b5080000000000007b8af8ff00000000bfa2000000000008000000b704000000000000850300000300001aa4d0c76db178478abc3604009500"/84], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) 891.764751ms ago: executing program 4 (id=928): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) pwrite64(r0, &(0x7f000009dd80)='\"', 0x1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000780)=ANY=[], 0xfe37, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x10208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$RTC_WIE_ON(r5, 0x700f) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0xfff1}, {0x3, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xfffd, 0xa, 0x4, 0x2}, {0x101, 0x2, 0x3, 0x5}, {0x9, 0x4, 0x52, 0x8}, {0x8, 0x1, 0x14, 0x8}, {0x3aff, 0xff, 0x3f, 0x1}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xff, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x10, 0x6}]}}]}}]}, 0x94}}, 0x24040084) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) acct(&(0x7f0000000280)='./file0\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) 810.066908ms ago: executing program 5 (id=929): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x8e9e, 0x200000d1, 0x1f94) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000680)={0x20000008}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008804) r3 = socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) rmdir(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x102}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000040)={[{@sb={'sb', 0x3d, 0x8000000000000000}}]}, 0x9, 0x53b, &(0x7f0000003580)="$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") quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='afs_volume\x00', r9, 0x0, 0x1000000000000000}, 0x18) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), 0x0}, 0x20) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 722.943796ms ago: executing program 1 (id=930): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600000070ead247ce6f024ffc4f412c25e0386ae15f13ff63d44b02b152afa05e7c2f5474c24d593338360aaf9a67d612497b0b603a440f62d236e1678edeaa250eb3b540e5ee6e8d26473fff46068ef0af25288c77b4567dc8adb8204058781a692992741e22ad1981ff7e2f86eee9509cba3e17fac07e95bd594df4b5a5f7399d0d040c28ef9b33f0f7cc1119c04dfee6510d96b0cf78378138ee0e36ee0423ead27799d818680d69bce89f7d3779daea4c0edefaa53785296627477005b994dde8e522f7ceeb3ee6"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000004bc7bfd68ef8059ed0787ebd5a00"/41], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r6}, 0xc) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) 588.813077ms ago: executing program 2 (id=931): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x757, 0x8, 0x1, 0x8, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x62) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000100)={0xfffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x58}}, 0x404c081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) write$binfmt_misc(r4, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r7, 0x0, 0x4010d00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000c217ba619700"/18], 0x48) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) 453.748759ms ago: executing program 0 (id=932): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x1, 0x0, 0x20000000, 0x2801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9edd}, 0x100202, 0x0, 0xfffffffb, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1400"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x9, 0x7, 0xe60}]}) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r7 = socket$caif_stream(0x25, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) writev(r7, &(0x7f00000000c0)=[{&(0x7f00000002c0)='S', 0x1}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b5080000000000007b8af8ff00000000bfa2000000000008000000b704000000000000850300000300001aa4d0c76db178478abc3604009500"/84], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 441.87104ms ago: executing program 1 (id=933): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r1, 0x0, 0x0, 0x4060, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) write$UHID_INPUT(r0, &(0x7f0000002940)={0x8, {"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", 0x1000}}, 0x1006) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x1, 0x40, 0xffffffff, 0x0, {{0x15, 0x4, 0x1, 0x11, 0x54, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0xa, 0x0, [{0x1, 0x4, "13c9"}]}, @cipso={0x86, 0x6}, @rr={0x7, 0xb, 0x7a, [@broadcast, @local]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x2, [{@local, 0xe69c9948}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x7f93}]}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x0, [0x7, 0x4]}, @ra={0x94, 0x4, 0x5}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000001d40)=@delchain={0xbd8, 0x65, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xfff2}, {0x8, 0x7}, {0xd, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xb94, 0x2, [@TCA_FW_ACT={0x330, 0x4, [@m_ct={0xd8, 0x14, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x7, 0x9, @loopback}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x31}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x5, 0x30000004, 0x6, 0x3ff}}]}, {0x6d, 0x6, "b69ba972bb7d98e339384bab25d5220853bec9484bad8068e466e3c6df7d47d08b3b9a0b6d2015a6c6a26560eb032b3c60f44b164d805ecf1059e3c041093ae30b6d8a4b32d7ef6f10ae7691cc6d8827530cc73d5cc40977f4bfc35c2ced028ea8eb49358ee99cc981"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xfc, 0x0, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x393, 0x10001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0x3, 0x0, 0x1, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x16ec, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1830, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0xe83, 0xffffffffffffffff, 0x3, 0x718}}]}, {0x6d, 0x6, "2a8d736f77762998a2af6bdf28671dcb4f26d88b79279bf62dcbbeb63f8efc09f62c47678cdbb75583274ee279b23a7e76cf14bfe7b3a7feae47eb511bd885e21fd61cb918946876c18b613e36b29e6de0fa92ee94cdfa6953fbf4010dce2fe866203317df124e143b"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x158, 0xd, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x45, 0x6, 0x5, 0xcaa}}, @TCA_DEF_DATA={0x6, 0x3, '%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, ':*)+\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x7fff, 0xffffffffffffffff, 0x5, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '{\x00'}]}, {0xd8, 0x6, "3a352a05f32305fd9f73adc8f0d948594f39bd5f9a8d9f885d86c98ddd073361286692aecf17fa56ccb3aa11b6c585b57e1d882dc69e22b5c9a940efdd05e14e59386455d7c14fd86acb718ebe6211e93d844bfe926c1f9d2e55cb06412312db17e1a694c309b7a37d74605041496651e41308156c938284fe403b705496171cffb2be68e716b47f791c2fc51b7c871a2ebc8d82b8e2080e33c327c74e4115f3822588af8454566d7073652f6f55619162c516e6f706efefd8574052b74f4c56b43960ab762124f8c0c2ae45be4c10280c54a6fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'nr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xc}}, @TCA_FW_POLICE={0x24, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xdf83}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe, 0x80, 0x1, 0x2, 0x8, 0xf92, 0xffffffff, 0x7f, 0x10001, 0x1, 0x7d77, 0x1, 0x6497d983, 0x2, 0x8001, 0x0, 0x81, 0x1, 0x9, 0x8, 0x8, 0x9, 0xf, 0x5, 0x7, 0x5, 0xfff, 0x5, 0xfffffffb, 0x0, 0xd, 0x2, 0x6, 0x7c02, 0x1, 0x176, 0x0, 0x3, 0x5, 0x4, 0x3, 0xb8, 0x683, 0x6, 0x2, 0x0, 0x3ff, 0x2, 0x0, 0x4, 0x1f44, 0x7fffffff, 0x7fff, 0x80000000, 0x9, 0x3, 0x7, 0x1, 0x497, 0xd018, 0x8, 0x8, 0xffff, 0x6, 0x2, 0x9, 0x6, 0x10, 0x200, 0xf, 0x0, 0xffffffff, 0x8d00000, 0x81, 0x800, 0x1ff, 0x3, 0xffff7fff, 0x101, 0x3, 0x80000001, 0x2, 0x2, 0x5, 0x3, 0x81, 0x7, 0xf83, 0x0, 0x8, 0x1, 0xc0e4, 0xa207, 0x8, 0x3, 0x1, 0x2, 0xfff, 0x6, 0x3, 0x8, 0x1ff, 0x7, 0x6, 0x4, 0xfffffff7, 0x5, 0x2, 0x7fffffff, 0x3, 0x400, 0x8001, 0xffffffff, 0x1, 0x2, 0x9, 0xfffff525, 0x0, 0x3, 0x7, 0x2, 0x2, 0xdb0, 0x3, 0x5, 0x1, 0x101, 0x20000000, 0x80, 0xfffffff8, 0x8, 0x2, 0x88, 0x9, 0xda, 0x10, 0x9, 0x3, 0x20, 0x4, 0x3, 0x6d9, 0x7, 0xbbc6, 0x71a, 0x919, 0x5, 0x0, 0x9, 0x37eec5da, 0x6, 0x8, 0x7ff, 0x1, 0x2, 0x7, 0x1, 0x80000001, 0x1, 0x1, 0xfffffff6, 0xe8c4, 0x8001, 0x81, 0x10000, 0x5, 0x0, 0x4, 0x8001, 0xfffffffd, 0x400, 0x8000, 0x6, 0xa776, 0x6, 0x8, 0x4, 0x1ff, 0x40, 0x1c000, 0x4, 0x3ff, 0xffff, 0x1, 0x5, 0x5, 0x7fffffff, 0x4, 0x1, 0xba25, 0x1, 0x2, 0x3, 0x3, 0xfffffeff, 0x3, 0x3, 0xbcd0, 0x2, 0x7da, 0x3, 0x3, 0x7, 0x36, 0xffffffff, 0xceac, 0x4, 0x1, 0x8ff3, 0x0, 0x8, 0x0, 0x400, 0x457e, 0x4, 0xffffffff, 0xff, 0x80, 0x0, 0x4, 0x5, 0x80000000, 0x80000000, 0x7, 0x8, 0x6, 0x939, 0x2, 0xff, 0x8, 0x800, 0x5, 0x80000000, 0x2, 0x7, 0x7, 0xfc, 0x15, 0xce, 0x80000000, 0xfffffffb, 0x401, 0x8001, 0x1, 0x7, 0x8, 0x7f, 0x5, 0x5, 0x6000, 0x80000001, 0x4b3b, 0x7280e92, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x41}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0xe, 0x3ff, 0x0, 0xd4, 0x6, 0x5, 0x8001, 0x5, 0x5f, 0x2, 0x3, 0x6, 0x8, 0x2bc, 0x5, 0x800, 0x0, 0x5, 0xe, 0x7, 0x7, 0x6, 0x10, 0x0, 0x0, 0x4f3, 0xd0, 0x3, 0x3, 0xe, 0x2, 0x2, 0x5, 0x8, 0xff, 0x5, 0x6, 0x989e, 0xb, 0x5, 0x3, 0xc21, 0x80, 0x7fff, 0x7, 0x3, 0x2, 0x40, 0x5, 0x9, 0x6, 0x3, 0x9b81, 0x6d, 0x571, 0x7, 0x2, 0x7, 0x1000, 0xcb0400, 0x9, 0xffffff01, 0x5, 0x4, 0x5, 0x7, 0x5, 0xc, 0x5173, 0x5, 0xbf, 0x2, 0x3ff, 0x3, 0x3, 0x4, 0x6, 0x3, 0xffffffc0, 0xec, 0x4, 0x4, 0x6, 0x0, 0x5, 0x8, 0x401, 0x80000001, 0x8001, 0x7, 0x1ff, 0xb07b, 0x47a, 0xffff, 0x9, 0x6, 0x5, 0x0, 0xb2b, 0x7fffffff, 0x3ff, 0x5, 0xffffffff, 0xfffffffe, 0x80, 0xe, 0x6, 0x6, 0x5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x90, 0x6, 0x2, 0x6, 0x4, 0x6, 0x7ff, 0x47, 0x5, 0xf, 0x828, 0x5, 0x6d, 0xfffff001, 0x1, 0x6c, 0x9, 0x3, 0x3, 0xdae, 0xe0, 0x5, 0x4, 0x10001, 0x5, 0x10, 0x67a, 0x5, 0x0, 0x2000005, 0x80000000, 0xe, 0x1, 0xf, 0xffffff81, 0x0, 0x2, 0x8, 0x0, 0x5, 0x6d64ae73, 0x101, 0x7ff, 0x0, 0x6, 0x400, 0x80000001, 0x539c, 0x80000001, 0x5, 0x9, 0x7, 0x4, 0x90000, 0x5, 0xf, 0x0, 0x0, 0x6, 0x2, 0x5, 0x0, 0x7, 0x7, 0x9, 0x7, 0xf0, 0x0, 0xfffff800, 0x8000, 0x8, 0xe2, 0x1, 0x7, 0x2, 0x24, 0x1, 0x7fa, 0x1, 0x5, 0xdd3, 0x8001, 0x8, 0x1, 0xfffffffa, 0x6, 0x2, 0x3, 0x2, 0x6, 0xcf, 0x1, 0x90, 0x5960000, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x7, 0x401, 0x6, 0x6, 0x491, 0xc, 0x4, 0x8, 0x1, 0xffff, 0x8, 0xfffffff8, 0x5, 0xc, 0xb163, 0x0, 0x0, 0x3, 0x800, 0xf, 0x7d, 0x0, 0x1, 0xb, 0x0, 0xd, 0x9, 0x1424, 0x4, 0x101, 0xfffffff9, 0x6, 0x1, 0x1, 0x7, 0x10001, 0x0, 0xff, 0x3, 0xa0e]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9c, 0x1}}]}, 0xbd8}, 0x1, 0x0, 0x0, 0x20040801}, 0x14) 364.621218ms ago: executing program 0 (id=934): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) fstat(r1, &(0x7f0000000240)) r2 = open(&(0x7f0000000d40)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x54, 0x3, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r5, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="0004000000000000000000000020000000950000000000000800000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r7, 0x500}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) statfs(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000d00)=""/171) ioperm(0x5, 0x235, 0xfffffffffffffff8) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x220, 0x220, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0xff, 0x514, &(0x7f0000001c00)="$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") 324.491801ms ago: executing program 0 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510001c00660080070290780a010102ac1414aa1101000000000000cb4a4a2106eaee41681a792e8b8fea6fb02d341abd197cb92e47902ead536d8a00d50fca7312e5f6d4bde442439812aebaa7d4f659057e208c6ddd0000000000000000"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000002500850000001b000000b7000000000000009500000000000000ae61699ebc82785d4ed0e5bf37"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) 0s ago: executing program 4 (id=936): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x757, 0x8, 0x1, 0x8, 0x20004, 0xc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x62) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, &(0x7f0000000100)={0xfffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYRES16=r0], 0x58}}, 0x404c081) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) write$binfmt_misc(r4, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r7, 0x0, 0x4010d00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000c217ba619700"/18], 0x48) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 7295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 85.093250][ T5195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5195 comm=syz.1.389 [ 85.105746][ T5195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5195 comm=syz.1.389 [ 85.179862][ T5200] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 85.189231][ T5200] team0: Port device dummy0 added [ 85.196690][ T5200] netlink: 'syz.1.391': attribute type 10 has an invalid length. [ 85.209533][ T5200] team0: Port device dummy0 removed [ 85.216982][ T5200] .`: (slave dummy0): Enslaving as an active interface with an up link [ 85.338809][ T5200] loop1: detected capacity change from 0 to 1024 [ 85.382437][ T5200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.451649][ T5200] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.391: missing EA_INODE flag [ 85.725141][ T5200] EXT4-fs (loop1): Remounting filesystem read-only [ 85.750747][ T5209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5209 comm=syz.4.393 [ 85.763237][ T5209] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5209 comm=syz.4.393 [ 85.816577][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.952631][ T5219] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 85.970721][ T5219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.030137][ T5219] macvlan0: entered promiscuous mode [ 86.035556][ T5219] macvlan0: entered allmulticast mode [ 86.057564][ T5219] bond1: entered promiscuous mode [ 86.068626][ T5219] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 86.086456][ T5219] bond1: left promiscuous mode [ 86.164665][ T5226] macvlan0: entered promiscuous mode [ 86.170082][ T5226] macvlan0: entered allmulticast mode [ 86.189925][ T5226] bond1: entered promiscuous mode [ 86.197640][ T5226] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 86.214235][ T5226] bond1: left promiscuous mode [ 86.318944][ T5238] __nla_validate_parse: 21 callbacks suppressed [ 86.318974][ T5238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 86.334279][ T5238] netlink: 40 bytes leftover after parsing attributes in process `syz.5.400'. [ 86.793337][ T5257] capability: warning: `syz.1.405' uses deprecated v2 capabilities in a way that may be insecure [ 86.839951][ T5257] loop1: detected capacity change from 0 to 1024 [ 86.873374][ T5257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.017664][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.063629][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.406'. [ 87.072491][ T5263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'. [ 87.241182][ T5274] loop2: detected capacity change from 0 to 1024 [ 87.255727][ T5277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5277 comm=syz.0.411 [ 87.258501][ T5270] bridge1: left promiscuous mode [ 87.268358][ T5277] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5277 comm=syz.0.411 [ 87.273122][ T5270] bridge1: left allmulticast mode [ 87.273304][ T5270] bridge2: left promiscuous mode [ 87.273383][ T5270] bridge2: left allmulticast mode [ 87.300845][ T5270] bridge0: left promiscuous mode [ 87.305852][ T5270] bridge0: left allmulticast mode [ 87.316174][ T5278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.411'. [ 87.325243][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 87.345738][ T5274] EXT4-fs: Ignoring removed orlov option [ 87.351868][ T5270] bond0: left promiscuous mode [ 87.363228][ T5274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.819359][ T5289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 87.828213][ T5289] netlink: 40 bytes leftover after parsing attributes in process `syz.0.413'. [ 87.850096][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.923026][ T5293] netlink: 'syz.2.414': attribute type 2 has an invalid length. [ 87.930752][ T5293] netlink: 32 bytes leftover after parsing attributes in process `syz.2.414'. [ 88.026780][ T5297] loop1: detected capacity change from 0 to 1024 [ 88.037537][ T5293] loop2: detected capacity change from 0 to 2048 [ 88.072544][ T5297] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 88.096233][ T5297] netlink: 68 bytes leftover after parsing attributes in process `syz.1.416'. [ 88.108540][ T3661] loop2: p1 < > p4 [ 88.125573][ T3661] loop2: p4 size 8388608 extends beyond EOD, truncated [ 88.159560][ T5265] syz.5.407 (5265) used greatest stack depth: 7448 bytes left [ 88.184361][ T5293] loop2: p1 < > p4 [ 88.188895][ T5293] loop2: p4 size 8388608 extends beyond EOD, truncated [ 88.310655][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 88.313876][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 88.536312][ T5318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5318 comm=syz.5.420 [ 88.548762][ T5318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5318 comm=syz.5.420 [ 88.930721][ T5320] xt_TPROXY: Can be used only with -p tcp or -p udp [ 88.990989][ T5307] loop4: detected capacity change from 0 to 1024 [ 88.999013][ T5307] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 89.096432][ T5330] dvmrp6: entered allmulticast mode [ 89.114390][ T5332] loop4: detected capacity change from 0 to 1024 [ 89.125614][ T5332] EXT4-fs: Ignoring removed orlov option [ 89.182721][ T5332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.272962][ T5341] selinux_netlink_send: 2 callbacks suppressed [ 89.272977][ T5341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5341 comm=syz.2.429 [ 89.291878][ T5341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5341 comm=syz.2.429 [ 89.671823][ T5346] sctp: [Deprecated]: syz.2.430 (pid 5346) Use of int in maxseg socket option. [ 89.671823][ T5346] Use struct sctp_assoc_value instead [ 89.722003][ T29] kauditd_printk_skb: 3023 callbacks suppressed [ 89.722019][ T29] audit: type=1400 audit(1767662227.865:20959): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.752911][ T29] audit: type=1400 audit(1767662227.865:20960): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.781130][ T29] audit: type=1326 audit(1767662227.875:20961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 89.804613][ T29] audit: type=1326 audit(1767662227.875:20962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 89.828060][ T29] audit: type=1326 audit(1767662227.875:20963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 89.851523][ T29] audit: type=1326 audit(1767662227.905:20964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 89.875035][ T29] audit: type=1400 audit(1767662227.905:20965): avc: denied { perfmon } for pid=5345 comm="syz.2.430" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.895956][ T29] audit: type=1326 audit(1767662227.905:20966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 89.919492][ T29] audit: type=1326 audit(1767662227.905:20967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 89.942906][ T29] audit: type=1326 audit(1767662227.905:20968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.2.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 90.033198][ T5351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5351 comm=syz.2.432 [ 90.045774][ T5351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5351 comm=syz.2.432 [ 90.085873][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.132877][ T5354] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 90.196743][ T5358] netlink: 'syz.4.433': attribute type 4 has an invalid length. [ 90.206851][ T5358] .`: renamed from bond0 [ 90.438105][ T5365] tipc: Started in network mode [ 90.443140][ T5365] tipc: Node identity ac14140f, cluster identity 4711 [ 90.467195][ T5365] tipc: New replicast peer: 255.255.255.83 [ 90.473165][ T5365] tipc: Enabled bearer , priority 10 [ 90.510166][ T5365] loop1: detected capacity change from 0 to 1024 [ 90.530064][ T5365] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.541047][ T5365] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.672181][ T5365] JBD2: no valid journal superblock found [ 90.677985][ T5365] EXT4-fs (loop1): Could not load journal inode [ 90.752955][ T5365] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 91.228234][ T5379] loop2: detected capacity change from 0 to 128 [ 91.490485][ T5383] __nla_validate_parse: 19 callbacks suppressed [ 91.490522][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 91.585916][ T5386] netlink: 200 bytes leftover after parsing attributes in process `syz.5.439'. [ 91.595184][ T23] tipc: Node number set to 2886997007 [ 91.676347][ T5388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5388 comm=syz.1.440 [ 91.688816][ T5388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5388 comm=syz.1.440 [ 92.139353][ T5398] loop2: detected capacity change from 0 to 512 [ 92.155941][ T5398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.180075][ T5398] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.442: invalid indirect mapped block 4294967295 (level 0) [ 92.194712][ T5398] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.442: invalid indirect mapped block 4294967295 (level 1) [ 92.209230][ T5398] EXT4-fs (loop2): 1 orphan inode deleted [ 92.215102][ T5398] EXT4-fs (loop2): 1 truncate cleaned up [ 92.221630][ T5398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.235326][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 92.308597][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 92.317534][ T5407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.444'. [ 92.330050][ T5407] netlink: 'syz.0.444': attribute type 13 has an invalid length. [ 92.344688][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.398500][ T5411] loop2: detected capacity change from 0 to 1024 [ 92.446896][ T5416] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5416 comm=syz.1.449 [ 92.459451][ T5416] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5416 comm=syz.1.449 [ 92.472992][ T5411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.497152][ T5411] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.445: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 92.522507][ T5411] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.445: reserved inode found cleared - inode=2 [ 92.535694][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.449'. [ 92.544691][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 92.595283][ T5411] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.445: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 92.671075][ T5427] loop5: detected capacity change from 0 to 1024 [ 92.708931][ T5426] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.445: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 92.709945][ T5427] EXT4-fs: Ignoring removed orlov option [ 92.746979][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 92.755878][ T5411] netlink: 'syz.2.445': attribute type 11 has an invalid length. [ 92.772339][ T5411] EXT4-fs error (device loop2): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.2.445: path /87/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 92.879406][ T5427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.902058][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 92.916625][ T5432] bond1: option ad_user_port_key: invalid value (1136) [ 92.923607][ T5432] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 92.933006][ T5432] bond1 (unregistering): Released all slaves [ 92.963297][ T5428] loop1: detected capacity change from 0 to 1024 [ 92.970042][ T5428] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 92.986423][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.482507][ T5443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 93.813269][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.881898][ T5450] loop5: detected capacity change from 0 to 128 [ 94.165529][ T5452] loop1: detected capacity change from 0 to 2048 [ 94.205493][ T3590] Alternate GPT is invalid, using primary GPT. [ 94.211922][ T3590] loop1: p2 p3 p7 [ 94.515658][ T5452] Alternate GPT is invalid, using primary GPT. [ 94.522127][ T5452] loop1: p2 p3 p7 [ 94.601878][ T5459] loop2: detected capacity change from 0 to 512 [ 94.636001][ T5459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.684863][ T5459] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.456: invalid indirect mapped block 4294967295 (level 0) [ 94.710257][ T5459] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.456: invalid indirect mapped block 4294967295 (level 1) [ 94.725563][ T5459] EXT4-fs (loop2): 1 orphan inode deleted [ 94.731577][ T5459] EXT4-fs (loop2): 1 truncate cleaned up [ 94.740995][ T5459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.763662][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 94.763678][ T29] audit: type=1326 audit(1767662232.905:21347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c303af783 code=0x7ffc0000 [ 94.805967][ T29] audit: type=1400 audit(1767662232.905:21348): avc: denied { write } for pid=5466 comm="syz.1.457" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.829016][ T29] audit: type=1400 audit(1767662232.905:21349): avc: denied { open } for pid=5466 comm="syz.1.457" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.852348][ T29] audit: type=1326 audit(1767662232.915:21350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 94.875910][ T29] audit: type=1326 audit(1767662232.915:21351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 94.899545][ T29] audit: type=1326 audit(1767662232.925:21352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 94.923662][ T29] audit: type=1326 audit(1767662232.925:21353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 94.947264][ T29] audit: type=1326 audit(1767662232.925:21354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c303e2005 code=0x7ffc0000 [ 94.951022][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 94.971069][ T29] audit: type=1326 audit(1767662232.925:21355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 94.985942][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 95.004292][ T29] audit: type=1326 audit(1767662232.925:21356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5466 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 95.045669][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 95.091740][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.128527][ T5471] loop5: detected capacity change from 0 to 512 [ 95.152455][ T5471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.201466][ T5471] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.267631][ T5471] Invalid ELF header magic: != ELF [ 95.306677][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.533985][ T5489] loop2: detected capacity change from 0 to 512 [ 95.541922][ T5489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.564862][ T5489] EXT4-fs (loop2): 1 truncate cleaned up [ 95.571591][ T5489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.737896][ T5503] bridge3: entered promiscuous mode [ 95.743402][ T5503] bridge3: entered allmulticast mode [ 95.812380][ T5509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5509 comm=syz.1.469 [ 95.824971][ T5509] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5509 comm=syz.1.469 [ 95.893813][ T5506] loop4: detected capacity change from 0 to 32768 [ 95.946087][ T5514] loop1: detected capacity change from 0 to 1024 [ 95.953057][ T5514] EXT4-fs: Ignoring removed orlov option [ 95.972430][ T5506] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 95.977913][ T5506] loop4: p1 start 460800 is beyond EOD, truncated [ 95.984510][ T5506] loop4: p2 size 83886080 extends beyond EOD, truncated [ 95.997115][ T5514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.015612][ T5506] loop4: p5 start 460800 is beyond EOD, truncated [ 96.022177][ T5506] loop4: p6 size 83886080 extends beyond EOD, truncated [ 96.093314][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 96.105185][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 96.116802][ T4145] udevd[4145]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 96.126736][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 96.319551][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.428441][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.630802][ T5528] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.802791][ T5540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.842347][ T5544] __nla_validate_parse: 7 callbacks suppressed [ 96.842365][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 96.868968][ T5540] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.477: invalid indirect mapped block 4294967295 (level 0) [ 96.871536][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'. [ 96.916059][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 96.938216][ T5540] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.477: invalid indirect mapped block 4294967295 (level 1) [ 96.948963][ T5544] bridge8: entered promiscuous mode [ 96.957404][ T5544] bridge8: entered allmulticast mode [ 96.970137][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.480'. [ 96.992063][ T5540] EXT4-fs (loop4): 1 orphan inode deleted [ 96.997879][ T5540] EXT4-fs (loop4): 1 truncate cleaned up [ 97.082041][ T5540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.115613][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 97.124588][ T5558] netlink: 40 bytes leftover after parsing attributes in process `syz.5.482'. [ 97.207769][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.286067][ T5559] netlink: 'syz.5.482': attribute type 13 has an invalid length. [ 97.338490][ T5563] netlink: 200 bytes leftover after parsing attributes in process `syz.1.484'. [ 97.381667][ T5564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5564 comm=syz.4.483 [ 97.394102][ T5564] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5564 comm=syz.4.483 [ 97.438947][ T5564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.483'. [ 97.447983][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 97.466842][ T5566] rdma_rxe: rxe_newlink: failed to add lo [ 97.577026][ T5575] set_capacity_and_notify: 1 callbacks suppressed [ 97.577045][ T5575] loop5: detected capacity change from 0 to 1024 [ 97.601876][ T5575] EXT4-fs: Ignoring removed orlov option [ 97.616041][ T5575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.854692][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'. [ 97.864291][ T5584] netlink: 'syz.0.489': attribute type 13 has an invalid length. [ 97.974097][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.053131][ T5590] bridge9: entered promiscuous mode [ 98.058453][ T5590] bridge9: entered allmulticast mode [ 98.800903][ T5611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5611 comm=syz.0.497 [ 98.813496][ T5611] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5611 comm=syz.0.497 [ 98.964186][ T5615] loop1: detected capacity change from 0 to 1024 [ 99.004283][ T5615] EXT4-fs: Ignoring removed orlov option [ 99.029228][ T5615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.065965][ T5620] loop5: detected capacity change from 0 to 732 [ 99.072733][ T5620] iso9660: Unknown parameter ' ' [ 99.354281][ T5631] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 99.403396][ T5625] loop2: detected capacity change from 0 to 32768 [ 99.513476][ T3309] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 99.571410][ T3309] loop2: p1 start 460800 is beyond EOD, truncated [ 99.577932][ T3309] loop2: p2 size 83886080 extends beyond EOD, truncated [ 99.610570][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.610997][ T3309] loop2: p5 start 460800 is beyond EOD, truncated [ 99.626213][ T3309] loop2: p6 size 83886080 extends beyond EOD, truncated [ 99.775942][ T29] kauditd_printk_skb: 1865 callbacks suppressed [ 99.775961][ T29] audit: type=1326 audit(1767662237.915:23222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 99.806087][ T5625] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 99.816567][ T5625] loop2: p1 start 460800 is beyond EOD, truncated [ 99.823075][ T5625] loop2: p2 size 83886080 extends beyond EOD, truncated [ 99.852297][ T5625] loop2: p5 start 460800 is beyond EOD, truncated [ 99.858848][ T5625] loop2: p6 size 83886080 extends beyond EOD, truncated [ 100.160722][ T29] audit: type=1326 audit(1767662237.955:23223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.184340][ T29] audit: type=1326 audit(1767662237.985:23224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.207869][ T29] audit: type=1326 audit(1767662237.985:23225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.231398][ T29] audit: type=1326 audit(1767662237.995:23226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f013778df90 code=0x7ffc0000 [ 100.242124][ T3006] udevd[3006]: worker [3309] terminated by signal 33 (Unknown signal 33) [ 100.255033][ T29] audit: type=1326 audit(1767662237.995:23227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.264071][ T3006] udevd[3006]: worker [3309] failed while handling '/devices/virtual/block/loop2' [ 100.287073][ T29] audit: type=1326 audit(1767662237.995:23228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.319801][ T29] audit: type=1326 audit(1767662238.015:23229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.325045][ T5643] loop1: detected capacity change from 0 to 512 [ 100.343256][ T29] audit: type=1326 audit(1767662238.015:23230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.343292][ T29] audit: type=1326 audit(1767662238.015:23231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.5.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 100.377468][ T3006] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 100.403967][ T5643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.438217][ T3006] loop2: p1 start 460800 is beyond EOD, truncated [ 100.444765][ T3006] loop2: p2 size 83886080 extends beyond EOD, truncated [ 100.454701][ T5643] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.505: invalid block [ 100.472820][ T5643] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.505: invalid indirect mapped block 4294967295 (level 1) [ 100.508216][ T5643] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.505: invalid indirect mapped block 4294967295 (level 1) [ 100.522846][ T3006] loop2: p5 start 460800 is beyond EOD, truncated [ 100.529391][ T3006] loop2: p6 size 83886080 extends beyond EOD, truncated [ 100.562048][ T5643] EXT4-fs (loop1): 2 truncates cleaned up [ 100.588456][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.623638][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 100.647564][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 100.658717][ T4145] udevd[4145]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 100.673068][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 100.730600][ T5656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5656 comm=syz.4.509 [ 100.743178][ T5656] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5656 comm=syz.4.509 [ 100.757353][ T5652] udevd[5652]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 100.768707][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 100.779834][ T5653] udevd[5653]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 100.791199][ T5654] udevd[5654]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 100.913267][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.042852][ T5674] loop1: detected capacity change from 0 to 512 [ 101.122330][ T5674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.134072][ T5674] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.512: invalid indirect mapped block 4294967295 (level 0) [ 101.298279][ T5674] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.512: invalid indirect mapped block 4294967295 (level 1) [ 101.313435][ T5674] EXT4-fs (loop1): 1 orphan inode deleted [ 101.319199][ T5674] EXT4-fs (loop1): 1 truncate cleaned up [ 101.327972][ T5674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.376979][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.442304][ T5683] loop1: detected capacity change from 0 to 732 [ 101.475298][ T5683] iso9660: Unknown parameter ' ' [ 101.619664][ T5686] loop4: detected capacity change from 0 to 1024 [ 101.644484][ T5686] EXT4-fs: Ignoring removed orlov option [ 101.817519][ T5686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.093833][ T5697] __nla_validate_parse: 9 callbacks suppressed [ 102.093853][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.516'. [ 102.182286][ T5699] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 102.194184][ T5699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.516'. [ 102.204316][ T5699] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 102.213432][ T5699] bond2 (unregistering): Released all slaves [ 102.653350][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.856771][ T5706] netlink: 340 bytes leftover after parsing attributes in process `syz.4.519'. [ 102.956338][ T5710] loop1: detected capacity change from 0 to 128 [ 102.965213][ T5710] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.985304][ T5710] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.972096][ T5733] siw: device registration error -23 [ 104.087805][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.524'. [ 104.548151][ T5754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 104.557325][ T5754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.529'. [ 104.568374][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 104.615576][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 104.629010][ T5754] bridge4: entered promiscuous mode [ 104.634314][ T5754] bridge4: entered allmulticast mode [ 104.698224][ T5757] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.928270][ T5763] loop2: detected capacity change from 0 to 512 [ 104.983845][ T5763] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.083264][ T5763] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.530: invalid indirect mapped block 4294967295 (level 0) [ 105.132686][ T5763] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.530: invalid indirect mapped block 4294967295 (level 1) [ 105.187627][ T29] kauditd_printk_skb: 1587 callbacks suppressed [ 105.187646][ T29] audit: type=1400 audit(1767662242.835:24819): avc: denied { bind } for pid=5749 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.213337][ T29] audit: type=1326 audit(1767662243.015:24820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c303a65e7 code=0x7ffc0000 [ 105.236771][ T29] audit: type=1326 audit(1767662243.015:24821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c3034b829 code=0x7ffc0000 [ 105.260191][ T29] audit: type=1326 audit(1767662243.015:24822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 105.283717][ T29] audit: type=1326 audit(1767662243.015:24823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c303a65e7 code=0x7ffc0000 [ 105.307092][ T29] audit: type=1326 audit(1767662243.015:24824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c3034b829 code=0x7ffc0000 [ 105.330534][ T29] audit: type=1326 audit(1767662243.015:24825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 105.353984][ T29] audit: type=1326 audit(1767662243.015:24826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 105.377557][ T29] audit: type=1326 audit(1767662243.015:24827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5740 comm="syz.0.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 105.385633][ T5772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.533'. [ 105.400984][ T29] audit: type=1326 audit(1767662243.155:24828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c303a65e7 code=0x7ffc0000 [ 105.410205][ T5772] netlink: 24 bytes leftover after parsing attributes in process `syz.5.533'. [ 105.481879][ T5763] EXT4-fs (loop2): 1 orphan inode deleted [ 105.487695][ T5763] EXT4-fs (loop2): 1 truncate cleaned up [ 105.494178][ T5763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.516453][ T5774] loop4: detected capacity change from 0 to 512 [ 105.526351][ T5774] EXT4-fs: Ignoring removed oldalloc option [ 105.532873][ T5774] EXT4-fs: Ignoring removed i_version option [ 105.539001][ T5774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.547577][ T5774] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.578682][ T5777] bridge10: entered promiscuous mode [ 105.583903][ T5774] EXT4-fs (loop4): 1 truncate cleaned up [ 105.584178][ T5777] bridge10: entered allmulticast mode [ 105.590681][ T5774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.611100][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.699935][ T5783] loop2: detected capacity change from 0 to 512 [ 105.718646][ T5783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.743435][ T5783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.756445][ T5783] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.827664][ T5784] loop5: detected capacity change from 0 to 128 [ 105.835851][ T5784] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.916956][ T5789] Invalid ELF header magic: != ELF [ 105.999243][ T5784] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.429038][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.660150][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.748087][ T4902] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.801132][ T5817] loop5: detected capacity change from 0 to 512 [ 106.826097][ T5814] bridge2: entered promiscuous mode [ 106.831399][ T5814] bridge2: entered allmulticast mode [ 106.838921][ T5817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.897777][ T5817] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.908730][ T5810] infiniband !yz!: set down [ 106.913350][ T5810] infiniband !yz!: added team_slave_0 [ 106.950047][ T5810] RDS/IB: !yz!: added [ 106.964058][ T5810] smc: adding ib device !yz! with port count 1 [ 106.964287][ T5824] loop4: detected capacity change from 0 to 512 [ 106.970381][ T5810] smc: ib device !yz! port 1 has no pnetid [ 106.979817][ T5824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.012754][ T5824] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.546: invalid indirect mapped block 4294967295 (level 0) [ 107.093185][ T5824] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.546: invalid indirect mapped block 4294967295 (level 1) [ 107.166018][ T5824] EXT4-fs (loop4): 1 orphan inode deleted [ 107.171839][ T5824] EXT4-fs (loop4): 1 truncate cleaned up [ 107.206777][ T5824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.243598][ T5824] __nla_validate_parse: 9 callbacks suppressed [ 107.243662][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 107.312369][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.449664][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 107.476708][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.547'. [ 107.585409][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.631182][ T5836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5836 comm=syz.2.559 [ 107.643748][ T5836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5836 comm=syz.2.559 [ 107.683214][ T5840] loop5: detected capacity change from 0 to 512 [ 107.728808][ T5840] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.746166][ T5842] netlink: 'syz.2.550': attribute type 13 has an invalid length. [ 107.775976][ T5840] EXT4-fs (loop5): 1 truncate cleaned up [ 107.784187][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.787755][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 107.805639][ T5846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.551'. [ 107.808273][ T5840] netlink: 48 bytes leftover after parsing attributes in process `syz.5.549'. [ 107.870944][ T5850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5850 comm=syz.0.552 [ 107.883425][ T5850] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5850 comm=syz.0.552 [ 107.900872][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 107.909820][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 108.068579][ T5856] loop4: detected capacity change from 0 to 512 [ 108.075815][ T5857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5857 comm=syz.0.565 [ 108.088275][ T5857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5857 comm=syz.0.565 [ 108.089363][ T5856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.127826][ T5856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.140721][ T5856] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.161392][ T5861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5861 comm=syz.0.555 [ 108.173932][ T5861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5861 comm=syz.0.555 [ 108.401937][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.430496][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.438090][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.448659][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.456132][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.463583][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.471038][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.478473][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.486006][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.493439][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.500843][ T23] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 108.527227][ T5868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.557'. [ 108.544457][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.571882][ T23] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 108.629787][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 108.653308][ T5873] netlink: 'syz.4.561': attribute type 13 has an invalid length. [ 108.686350][ T5864] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 108.710518][ T5864] SELinux: failed to load policy [ 108.746739][ T5883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5883 comm=syz.4.564 [ 108.759275][ T5883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5883 comm=syz.4.564 [ 108.816144][ T5815] Bluetooth: hci0: command 0x1003 tx timeout [ 108.821722][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.539094][ T5897] netlink: 'syz.5.569': attribute type 1 has an invalid length. [ 109.565023][ T5897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.584397][ T5908] loop2: detected capacity change from 0 to 1024 [ 109.591724][ T5908] EXT4-fs: Ignoring removed oldalloc option [ 109.597782][ T5908] EXT4-fs: Ignoring removed bh option [ 109.608989][ T5897] bond2 (unregistering): Released all slaves [ 109.648256][ T5908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.666479][ T5908] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 109.698479][ T5919] netlink: 'syz.1.575': attribute type 13 has an invalid length. [ 109.750223][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.791593][ T5925] loop1: detected capacity change from 0 to 512 [ 109.836822][ T5925] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.837537][ T5929] loop4: detected capacity change from 0 to 1024 [ 109.855889][ T5929] EXT4-fs: Ignoring removed orlov option [ 109.872802][ T5931] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 109.887326][ T5925] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.579: invalid indirect mapped block 4294967295 (level 0) [ 109.915393][ T5925] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.579: invalid indirect mapped block 4294967295 (level 1) [ 109.924538][ T5929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.949134][ T5925] EXT4-fs (loop1): 1 orphan inode deleted [ 109.955041][ T5925] EXT4-fs (loop1): 1 truncate cleaned up [ 109.971891][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.028953][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.069945][ T5941] ALSA: seq fatal error: cannot create timer (-19) [ 110.191317][ T29] kauditd_printk_skb: 1650 callbacks suppressed [ 110.191337][ T29] audit: type=1400 audit(1767662248.265:26479): avc: denied { connect } for pid=5945 comm="syz.1.585" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.243403][ T29] audit: type=1326 audit(1767662248.355:26480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 110.266965][ T29] audit: type=1326 audit(1767662248.355:26481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 110.290473][ T29] audit: type=1326 audit(1767662248.355:26482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 110.314030][ T29] audit: type=1326 audit(1767662248.355:26483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.4.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 110.334718][ T5951] loop1: detected capacity change from 0 to 1024 [ 110.713410][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.831155][ T29] audit: type=1400 audit(1767662248.965:26484): avc: denied { create } for pid=5959 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.882984][ T29] audit: type=1400 audit(1767662248.995:26485): avc: denied { connect } for pid=5959 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.886539][ T5965] netlink: 'syz.1.590': attribute type 13 has an invalid length. [ 110.903235][ T29] audit: type=1326 audit(1767662249.015:26486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 110.934461][ T29] audit: type=1326 audit(1767662249.015:26487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 110.958006][ T29] audit: type=1326 audit(1767662249.015:26488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5964 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 111.124774][ T5975] loop1: detected capacity change from 0 to 512 [ 111.161909][ T5975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.196182][ T5975] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.594: invalid indirect mapped block 4294967295 (level 0) [ 111.220656][ T5975] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.594: invalid indirect mapped block 4294967295 (level 1) [ 111.235639][ T5975] EXT4-fs (loop1): 1 orphan inode deleted [ 111.241668][ T5975] EXT4-fs (loop1): 1 truncate cleaned up [ 111.252066][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.271678][ T3499] IPVS: starting estimator thread 0... [ 111.331026][ T5988] loop5: detected capacity change from 0 to 1024 [ 111.338410][ T5988] EXT4-fs: Ignoring removed orlov option [ 111.344987][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.361381][ T5985] IPVS: using max 2256 ests per chain, 112800 per kthread [ 111.376135][ T5988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.460341][ T5995] loop1: detected capacity change from 0 to 512 [ 111.488455][ T5995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.527735][ T5995] EXT4-fs (loop1): 1 truncate cleaned up [ 111.541822][ T5995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.889805][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.913394][ T6003] 9p: Bad value for 'wfdno' [ 111.961609][ T6005] netlink: 'syz.5.602': attribute type 13 has an invalid length. [ 112.001683][ T6011] loop5: detected capacity change from 0 to 1024 [ 112.010386][ T6011] EXT4-fs: Ignoring removed orlov option [ 112.023414][ T6011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.065790][ T6014] loop4: detected capacity change from 0 to 128 [ 112.277712][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.763176][ T6026] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.607: inode has both inline data and extents flags [ 112.783557][ T6026] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.607: couldn't read orphan inode 15 (err -117) [ 112.825756][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.918268][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.949017][ T6029] selinux_netlink_send: 8 callbacks suppressed [ 112.949032][ T6029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6029 comm=syz.4.609 [ 112.967722][ T6029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6029 comm=syz.4.609 [ 113.005638][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.036865][ T6033] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.081797][ T6033] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.608: invalid indirect mapped block 4294967295 (level 0) [ 113.104123][ T6040] __nla_validate_parse: 23 callbacks suppressed [ 113.104141][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.612'. [ 113.119354][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 113.134839][ T6033] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.608: invalid indirect mapped block 4294967295 (level 1) [ 113.160127][ T6033] EXT4-fs (loop1): 1 orphan inode deleted [ 113.165964][ T6033] EXT4-fs (loop1): 1 truncate cleaned up [ 113.172823][ T6033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.224451][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.615'. [ 113.233377][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.5.615'. [ 113.243438][ T6048] netlink: 'syz.5.615': attribute type 13 has an invalid length. [ 113.246464][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.300058][ T6052] set_capacity_and_notify: 2 callbacks suppressed [ 113.300075][ T6052] loop1: detected capacity change from 0 to 1024 [ 113.316527][ T6052] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.339140][ T6052] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.355810][ T6052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.362682][ T6052] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.616: Freeing blocks not in datazone - block = 0, count = 4096 [ 113.376287][ T6052] EXT4-fs (loop1): 1 orphan inode deleted [ 113.385544][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.471108][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.491943][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 113.500948][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.618'. [ 113.570837][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 113.602638][ T6058] bridge4: entered promiscuous mode [ 113.607912][ T6058] bridge4: entered allmulticast mode [ 113.647077][ T6067] loop1: detected capacity change from 0 to 1024 [ 113.656112][ T6067] EXT4-fs: Ignoring removed orlov option [ 113.670385][ T6067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.862395][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.873820][ T6072] loop5: detected capacity change from 0 to 1024 [ 113.942926][ T6072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.602661][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.835951][ T6090] loop4: detected capacity change from 0 to 512 [ 114.850423][ T6090] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.882242][ T6090] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.626: invalid indirect mapped block 4294967295 (level 0) [ 114.911641][ T6090] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.626: invalid indirect mapped block 4294967295 (level 1) [ 114.930304][ T6090] EXT4-fs (loop4): 1 orphan inode deleted [ 114.936300][ T6090] EXT4-fs (loop4): 1 truncate cleaned up [ 114.942673][ T6090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.958867][ T6097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6097 comm=syz.5.624 [ 114.971397][ T6097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6097 comm=syz.5.624 [ 115.057488][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.201605][ T29] kauditd_printk_skb: 1551 callbacks suppressed [ 115.201619][ T29] audit: type=1326 audit(1767662253.345:28040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 115.245739][ T29] audit: type=1326 audit(1767662253.375:28041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc388ea65e7 code=0x7ffc0000 [ 115.269259][ T29] audit: type=1326 audit(1767662253.375:28042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc388e4b829 code=0x7ffc0000 [ 115.292716][ T29] audit: type=1326 audit(1767662253.375:28043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 115.316459][ T29] audit: type=1326 audit(1767662253.375:28044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 115.328279][ T6114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 115.340096][ T29] audit: type=1326 audit(1767662253.375:28045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 115.370892][ T6114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 115.372320][ T29] audit: type=1326 audit(1767662253.375:28046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 115.404655][ T29] audit: type=1326 audit(1767662253.375:28047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 115.428183][ T29] audit: type=1326 audit(1767662253.375:28048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc388ea65e7 code=0x7ffc0000 [ 115.443406][ T6115] tipc: Enabled bearer , priority 10 [ 115.451647][ T29] audit: type=1326 audit(1767662253.375:28049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc388e4b829 code=0x7ffc0000 [ 115.491798][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 115.508284][ T6116] bridge5: entered promiscuous mode [ 115.513658][ T6116] bridge5: entered allmulticast mode [ 115.716329][ T6123] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.772418][ T6123] loop4: detected capacity change from 0 to 512 [ 115.818950][ T6130] loop1: detected capacity change from 0 to 1024 [ 115.838716][ T6130] EXT4-fs: Ignoring removed orlov option [ 115.855925][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.890375][ T6134] bridge_slave_1: left allmulticast mode [ 115.896110][ T6134] bridge_slave_1: left promiscuous mode [ 115.901898][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.910692][ T6134] bridge_slave_0: left allmulticast mode [ 115.916565][ T6134] bridge_slave_0: left promiscuous mode [ 115.922390][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.611062][ T3488] tipc: Node number set to 4269801490 [ 116.650009][ T6150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6150 comm=syz.0.641 [ 116.662472][ T6150] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6150 comm=syz.0.641 [ 116.758434][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.007946][ T6164] Invalid ELF header magic: != ELF [ 117.079140][ T6152] netlink: 'syz.0.642': attribute type 2 has an invalid length. [ 117.087223][ T6152] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 117.094953][ T6152] netlink: 'syz.0.642': attribute type 1 has an invalid length. [ 117.128235][ T6152] netlink: 'syz.0.642': attribute type 21 has an invalid length. [ 117.427321][ T6168] bridge4: entered promiscuous mode [ 117.432635][ T6168] bridge4: entered allmulticast mode [ 117.440997][ T6172] loop1: detected capacity change from 0 to 512 [ 117.449442][ T6172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.477833][ T6172] EXT4-fs (loop1): 1 truncate cleaned up [ 117.484153][ T6172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.576545][ T6172] SELinux: policydb magic number 0xf97cffad does not match expected magic number 0xf97cff8c [ 117.586892][ T6172] SELinux: failed to load policy [ 117.839212][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.955104][ T6184] bridge9: entered promiscuous mode [ 117.960423][ T6184] bridge9: entered allmulticast mode [ 118.125753][ T6189] loop1: detected capacity change from 0 to 512 [ 118.192128][ T6189] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.419067][ T6189] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.651: invalid indirect mapped block 4294967295 (level 0) [ 118.437595][ T6189] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.651: invalid indirect mapped block 4294967295 (level 1) [ 118.454865][ T6189] EXT4-fs (loop1): 1 orphan inode deleted [ 118.460637][ T6189] EXT4-fs (loop1): 1 truncate cleaned up [ 118.466955][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.467757][ T6193] __nla_validate_parse: 10 callbacks suppressed [ 118.467798][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 118.476710][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.481924][ T6193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.653'. [ 118.532898][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.545318][ T6200] netlink: 'syz.0.653': attribute type 13 has an invalid length. [ 118.846103][ T6196] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.863418][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 118.945490][ T6205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.656'. [ 118.991931][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.003247][ T6198] netlink: 'syz.4.655': attribute type 13 has an invalid length. [ 119.026539][ T6198] 9p: Bad value for 'rfdno' [ 119.042328][ T6198] loop4: detected capacity change from 0 to 512 [ 119.105691][ T6198] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 119.134424][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.656'. [ 119.235035][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 119.243931][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.658'. [ 119.299410][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 119.308338][ T6214] netlink: 'syz.1.657': attribute type 30 has an invalid length. [ 119.326585][ T4889] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.338203][ T4889] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.348441][ T4889] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.356738][ T4889] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.877201][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 119.886097][ T6229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.662'. [ 120.194958][ T6234] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 120.613728][ T29] kauditd_printk_skb: 1368 callbacks suppressed [ 120.613744][ T29] audit: type=1326 audit(1767662258.755:29418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.644303][ T29] audit: type=1326 audit(1767662258.795:29419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.667899][ T29] audit: type=1326 audit(1767662258.795:29420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.691527][ T29] audit: type=1326 audit(1767662258.795:29421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.715657][ T29] audit: type=1326 audit(1767662258.835:29422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.739154][ T29] audit: type=1326 audit(1767662258.835:29423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.762708][ T29] audit: type=1326 audit(1767662258.835:29424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.786171][ T29] audit: type=1326 audit(1767662258.835:29425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.809613][ T29] audit: type=1326 audit(1767662258.835:29426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.833194][ T29] audit: type=1326 audit(1767662258.835:29427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 120.908109][ T6237] netlink: zone id is out of range [ 120.913330][ T6237] netlink: zone id is out of range [ 120.918687][ T6237] netlink: zone id is out of range [ 120.924350][ T6237] netlink: zone id is out of range [ 120.929750][ T6237] netlink: zone id is out of range [ 120.956498][ T6237] netlink: zone id is out of range [ 120.975675][ T6237] netlink: zone id is out of range [ 120.980923][ T6237] netlink: zone id is out of range [ 121.006450][ T6237] netlink: zone id is out of range [ 121.021626][ T6237] netlink: zone id is out of range [ 121.200848][ T6259] netlink: 'syz.4.671': attribute type 13 has an invalid length. [ 121.467795][ T6265] loop4: detected capacity change from 0 to 128 [ 121.554053][ T6266] syz.4.672: attempt to access beyond end of device [ 121.554053][ T6266] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 121.647118][ T6266] syz.4.672: attempt to access beyond end of device [ 121.647118][ T6266] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 121.694333][ T6266] syz.4.672: attempt to access beyond end of device [ 121.694333][ T6266] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 121.738205][ T6266] syz.4.672: attempt to access beyond end of device [ 121.738205][ T6266] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 121.781033][ T6266] syz.4.672: attempt to access beyond end of device [ 121.781033][ T6266] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 121.863311][ T6266] syz.4.672: attempt to access beyond end of device [ 121.863311][ T6266] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 121.902292][ T6266] syz.4.672: attempt to access beyond end of device [ 121.902292][ T6266] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 121.948089][ T6266] syz.4.672: attempt to access beyond end of device [ 121.948089][ T6266] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 121.991387][ T6266] syz.4.672: attempt to access beyond end of device [ 121.991387][ T6266] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 122.042097][ T6266] syz.4.672: attempt to access beyond end of device [ 122.042097][ T6266] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 122.244270][ T6282] hub 1-0:1.0: USB hub found [ 122.259363][ T6282] hub 1-0:1.0: 8 ports detected [ 122.383922][ T6241] netlink: 'syz.2.666': attribute type 3 has an invalid length. [ 122.422018][ T6283] loop4: detected capacity change from 0 to 1024 [ 122.449755][ T6283] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 122.460765][ T6283] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 122.491730][ T6283] JBD2: no valid journal superblock found [ 122.497518][ T6283] EXT4-fs (loop4): Could not load journal inode [ 122.576572][ T6283] netlink: 'syz.4.675': attribute type 2 has an invalid length. [ 122.584474][ T6283] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 122.592256][ T6283] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 122.698726][ T6296] netlink: 'syz.4.675': attribute type 21 has an invalid length. [ 122.788012][ T6301] loop1: detected capacity change from 0 to 1024 [ 122.843657][ T6302] siw: device registration error -23 [ 122.849893][ T6303] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.382030][ T6301] ext4: Unknown parameter 'subj_user' [ 123.566378][ T6315] loop5: detected capacity change from 0 to 512 [ 123.584042][ T6315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.601672][ T6316] __nla_validate_parse: 8 callbacks suppressed [ 123.601689][ T6316] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.686'. [ 123.634218][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 123.663043][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 123.671906][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.688'. [ 123.686723][ T6326] netlink: 'syz.1.688': attribute type 13 has an invalid length. [ 123.734487][ T4886] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.760261][ T4886] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.786028][ T4886] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.805979][ T4886] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.838833][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 123.848072][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.861663][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 123.872671][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 123.933392][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 123.949577][ T6338] bridge0: entered promiscuous mode [ 123.954916][ T6338] bridge0: entered allmulticast mode [ 123.979675][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 123.999633][ T6348] bridge_slave_1: left allmulticast mode [ 124.005368][ T6348] bridge_slave_1: left promiscuous mode [ 124.011193][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.045371][ T6348] bridge_slave_0: left allmulticast mode [ 124.051186][ T6348] bridge_slave_0: left promiscuous mode [ 124.056906][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.320488][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.704'. [ 124.881590][ T6367] loop1: detected capacity change from 0 to 1024 [ 124.918780][ T6367] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.929793][ T6367] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 124.980155][ T6367] JBD2: no valid journal superblock found [ 124.986045][ T6367] EXT4-fs (loop1): Could not load journal inode [ 125.253883][ T6367] netlink: 'syz.1.695': attribute type 2 has an invalid length. [ 125.261809][ T6367] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 125.269518][ T6367] netlink: 'syz.1.695': attribute type 1 has an invalid length. [ 125.288712][ T6367] netlink: 'syz.1.695': attribute type 21 has an invalid length. [ 125.364111][ T6373] siw: device registration error -23 [ 125.466629][ T6382] loop4: detected capacity change from 0 to 1024 [ 125.476300][ T6382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.493965][ T6382] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 125.510743][ T6382] System zones: 0-1, 3-36 [ 125.519412][ T6385] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.541451][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.596473][ T6382] gre0: entered promiscuous mode [ 125.601605][ T6382] gre0: entered allmulticast mode [ 125.626592][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 125.626609][ T29] audit: type=1326 audit(1767662263.765:30248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.696411][ T29] audit: type=1326 audit(1767662263.795:30249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.1.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc388ee2005 code=0x7ffc0000 [ 125.720020][ T29] audit: type=1326 audit(1767662263.795:30250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.743563][ T29] audit: type=1400 audit(1767662263.795:30251): avc: denied { setattr } for pid=6381 comm="syz.4.702" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.765497][ T29] audit: type=1326 audit(1767662263.805:30252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.789003][ T29] audit: type=1326 audit(1767662263.805:30253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.812415][ T29] audit: type=1326 audit(1767662263.805:30254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.835885][ T29] audit: type=1326 audit(1767662263.805:30255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.859597][ T29] audit: type=1326 audit(1767662263.805:30256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.883105][ T29] audit: type=1326 audit(1767662263.805:30257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6381 comm="syz.4.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6385f9f749 code=0x7ffc0000 [ 125.907319][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.590588][ T6403] loop5: detected capacity change from 0 to 32768 [ 126.672328][ T5654] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 126.706361][ T5654] loop5: p1 start 460800 is beyond EOD, truncated [ 126.712921][ T5654] loop5: p2 size 83886080 extends beyond EOD, truncated [ 126.784035][ T5654] loop5: p5 start 460800 is beyond EOD, truncated [ 126.790522][ T5654] loop5: p6 size 83886080 extends beyond EOD, truncated [ 126.869787][ T6403] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 126.896854][ T6403] loop5: p1 start 460800 is beyond EOD, truncated [ 126.903486][ T6403] loop5: p2 size 83886080 extends beyond EOD, truncated [ 126.985470][ T6403] loop5: p5 start 460800 is beyond EOD, truncated [ 126.992094][ T6403] loop5: p6 size 83886080 extends beyond EOD, truncated [ 127.314022][ T6422] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.712' sets config #1 [ 127.539395][ T5654] udevd[5654]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 127.539434][ T5652] udevd[5652]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 127.552390][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 127.587089][ T5653] udevd[5653]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 127.618796][ T6430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6430 comm=syz.5.716 [ 127.631230][ T6430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6430 comm=syz.5.716 [ 127.787389][ T6436] netlink: 'syz.0.717': attribute type 21 has an invalid length. [ 127.811336][ T5652] udevd[5652]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 127.814243][ T5653] udevd[5653]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 127.832488][ T3661] udevd[3661]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 127.843740][ T5654] udevd[5654]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 128.063564][ T6440] delete_channel: no stack [ 128.689313][ T6448] loop4: detected capacity change from 0 to 1024 [ 128.725895][ T6448] ext4: Unknown parameter 'subj_user' [ 129.107918][ T6460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6460 comm=syz.5.726 [ 129.120398][ T6460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6460 comm=syz.5.726 [ 129.121339][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.179728][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.192590][ T6458] netlink: 'syz.0.725': attribute type 13 has an invalid length. [ 129.212120][ T6460] __nla_validate_parse: 13 callbacks suppressed [ 129.212138][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.726'. [ 129.227399][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'. [ 129.272313][ T6458] 9p: Bad value for 'rfdno' [ 129.278869][ T6464] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.404974][ T6466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.493159][ T6469] 9p: Bad value for 'rfdno' [ 129.613399][ T6472] netlink: 96 bytes leftover after parsing attributes in process `syz.4.729'. [ 129.714273][ T6477] loop4: detected capacity change from 0 to 512 [ 129.738331][ T6477] EXT4-fs (loop4): orphan cleanup on readonly fs [ 129.749679][ T6477] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.729: bg 0: block 127: padding at end of block bitmap is not set [ 129.764823][ T6477] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.729: corrupted inode contents [ 129.777427][ T6477] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 129.786327][ T6477] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.729: corrupted inode contents [ 129.798529][ T6477] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.729: mark_inode_dirty error [ 129.810604][ T6477] EXT4-fs (loop4): 1 orphan inode deleted [ 129.816925][ T6477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.509583][ T6496] netem: change failed [ 130.533651][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.823808][ T29] kauditd_printk_skb: 1123 callbacks suppressed [ 130.823824][ T29] audit: type=1400 audit(1767662268.965:31381): avc: denied { read } for pid=6498 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.887468][ T29] audit: type=1400 audit(1767662269.025:31382): avc: denied { append } for pid=6506 comm="syz.5.737" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.924091][ T6508] program syz.5.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.965015][ T29] audit: type=1400 audit(1767662269.055:31383): avc: denied { create } for pid=6506 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.985077][ T29] audit: type=1400 audit(1767662269.055:31384): avc: denied { getopt } for pid=6506 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.005195][ T29] audit: type=1400 audit(1767662269.065:31385): avc: denied { override_creds } for pid=6506 comm="syz.5.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.025206][ T29] audit: type=1400 audit(1767662269.085:31386): avc: denied { getopt } for pid=6498 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.044661][ T29] audit: type=1400 audit(1767662269.105:31387): avc: denied { getopt } for pid=6485 comm="syz.1.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.281294][ T29] audit: type=1326 audit(1767662269.125:31388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6506 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 131.304967][ T29] audit: type=1326 audit(1767662269.125:31389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6506 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 131.328461][ T29] audit: type=1326 audit(1767662269.125:31390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6506 comm="syz.5.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 131.467386][ T6486] syz.1.732 (6486) used greatest stack depth: 7400 bytes left [ 131.482623][ T6525] tipc: Started in network mode [ 131.487664][ T6525] tipc: Node identity 7f000001, cluster identity 4711 [ 131.564864][ T6525] tipc: Enabled bearer , priority 10 [ 131.838914][ T6541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6541 comm=syz.4.747 [ 131.851381][ T6541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6541 comm=syz.4.747 [ 132.322290][ T6541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.747'. [ 132.331373][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 132.368673][ T6550] $Hÿ: left promiscuous mode [ 132.373577][ T6550] bond_slave_0: left promiscuous mode [ 132.379026][ T6550] bond_slave_1: left promiscuous mode [ 132.412315][ T6552] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.748' sets config #1 [ 132.452596][ T6556] loop5: detected capacity change from 0 to 128 [ 132.455484][ T6550] wg2: left promiscuous mode [ 132.463688][ T6550] wg2: left allmulticast mode [ 132.468960][ T6550] veth0_to_team: left promiscuous mode [ 132.476534][ T6550] bridge1: left promiscuous mode [ 132.481522][ T6550] bridge1: left allmulticast mode [ 132.486668][ T6550] bridge2: left promiscuous mode [ 132.491681][ T6550] bridge2: left allmulticast mode [ 132.496847][ T6550] bridge3: left promiscuous mode [ 132.501928][ T6550] bridge3: left allmulticast mode [ 132.507150][ T6550] bridge4: left promiscuous mode [ 132.512184][ T6550] bridge4: left allmulticast mode [ 132.517357][ T6550] bridge5: left promiscuous mode [ 132.522349][ T6550] bridge5: left allmulticast mode [ 132.527565][ T6550] bridge6: left promiscuous mode [ 132.532596][ T6550] bridge6: left allmulticast mode [ 132.537757][ T6550] bridge7: left promiscuous mode [ 132.542751][ T6550] bridge7: left allmulticast mode [ 132.548201][ T6550] bridge8: left promiscuous mode [ 132.553187][ T6550] bridge8: left allmulticast mode [ 132.596410][ T6550] bridge9: left promiscuous mode [ 132.601497][ T6550] bridge9: left allmulticast mode [ 132.606637][ T6550] bridge0: left promiscuous mode [ 132.611690][ T6550] bridge0: left allmulticast mode [ 132.681378][ T23] tipc: Node number set to 2130706433 [ 132.733186][ T6566] program syz.5.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.746788][ T6566] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 132.763905][ T6566] siw: device registration error -23 [ 133.033911][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.756'. [ 133.042821][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.5.756'. [ 133.455356][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 134.384633][ T6579] syz.2.755 (6579) used greatest stack depth: 6104 bytes left [ 134.402589][ T6599] SELinux: Context /usr/sbin/ntpd is not valid (left unmapped). [ 134.498085][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 134.528930][ T6606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6606 comm=syz.0.762 [ 134.541484][ T6606] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6606 comm=syz.0.762 [ 134.555282][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.762'. [ 134.564282][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 134.752481][ T6621] loop5: detected capacity change from 0 to 1024 [ 134.766892][ T3006] udevd[3006]: worker [5654] terminated by signal 33 (Unknown signal 33) [ 134.778558][ T6621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.792569][ T6626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6626 comm=syz.0.769 [ 134.799850][ T3006] udevd[3006]: worker [5654] failed while handling '/devices/virtual/block/loop5' [ 134.805153][ T6626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6626 comm=syz.0.769 [ 134.815314][ T6621] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.852638][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.761'. [ 134.864918][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 134.874978][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'. [ 134.884038][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'. [ 134.893622][ T6633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=6633 comm=syz.4.770 [ 134.939337][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 134.960718][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 134.969653][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 135.036216][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.111349][ T6646] rdma_rxe: rxe_newlink: failed to add lo [ 135.685190][ T6662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6662 comm=syz.1.779 [ 135.697765][ T6662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6662 comm=syz.1.779 [ 135.832008][ T29] kauditd_printk_skb: 1178 callbacks suppressed [ 135.832024][ T29] audit: type=1326 audit(1767662273.975:32569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01377c2005 code=0x7ffc0000 [ 135.886573][ T29] audit: type=1326 audit(1767662273.975:32570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01377865e7 code=0x7ffc0000 [ 135.910023][ T29] audit: type=1326 audit(1767662273.975:32571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f013772b829 code=0x7ffc0000 [ 135.933453][ T29] audit: type=1326 audit(1767662273.975:32572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 135.957000][ T29] audit: type=1326 audit(1767662273.975:32573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01377865e7 code=0x7ffc0000 [ 135.980416][ T29] audit: type=1326 audit(1767662273.975:32574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f013772b829 code=0x7ffc0000 [ 136.003855][ T29] audit: type=1326 audit(1767662273.975:32575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 136.027355][ T29] audit: type=1326 audit(1767662273.975:32576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01377865e7 code=0x7ffc0000 [ 136.050830][ T29] audit: type=1326 audit(1767662273.975:32577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f013772b829 code=0x7ffc0000 [ 136.074336][ T29] audit: type=1326 audit(1767662273.975:32578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6639 comm="syz.5.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f013778f749 code=0x7ffc0000 [ 136.236433][ T6670] loop5: detected capacity change from 0 to 1024 [ 136.251824][ T6670] EXT4-fs: Ignoring removed orlov option [ 136.321531][ T6670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.342438][ T6672] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6672 comm=syz.4.782 [ 136.354872][ T6672] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6672 comm=syz.4.782 [ 136.378584][ T6675] bond1 (unregistering): Released all slaves [ 136.867242][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.002598][ T6690] netlink: 'syz.2.788': attribute type 13 has an invalid length. [ 137.104510][ T6701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6701 comm=syz.4.790 [ 137.118120][ T6703] syz.5.791: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 137.132850][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.5.791 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.132882][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.132897][ T6703] Call Trace: [ 137.132989][ T6703] [ 137.132999][ T6703] __dump_stack+0x1d/0x30 [ 137.133115][ T6703] dump_stack_lvl+0x95/0xd0 [ 137.133141][ T6703] dump_stack+0x15/0x1b [ 137.133166][ T6703] warn_alloc+0x12b/0x1a0 [ 137.133217][ T6703] __vmalloc_node_range_noprof+0xa0/0x1310 [ 137.133247][ T6703] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 137.133301][ T6703] ? probe_sched_wakeup+0x85/0xa0 [ 137.133389][ T6703] ? ttwu_do_activate+0x1d3/0x210 [ 137.133417][ T6703] ? __rcu_read_unlock+0x4f/0x70 [ 137.133444][ T6703] ? avc_has_perm_noaudit+0xab/0x130 [ 137.133558][ T6703] ? should_fail_ex+0x30/0x280 [ 137.133605][ T6703] ? should_failslab+0x8c/0xb0 [ 137.133626][ T6703] vmalloc_user_noprof+0x7d/0xb0 [ 137.133669][ T6703] ? xskq_create+0x80/0xe0 [ 137.133703][ T6703] xskq_create+0x80/0xe0 [ 137.133810][ T6703] xsk_init_queue+0x95/0xf0 [ 137.133842][ T6703] xsk_setsockopt+0x3f5/0x640 [ 137.133939][ T6703] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.133972][ T6703] __sys_setsockopt+0x184/0x200 [ 137.134061][ T6703] __x64_sys_setsockopt+0x64/0x80 [ 137.134089][ T6703] x64_sys_call+0x21d5/0x3000 [ 137.134115][ T6703] do_syscall_64+0xca/0x2b0 [ 137.134151][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.134224][ T6703] RIP: 0033:0x7f013778f749 [ 137.134247][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.134266][ T6703] RSP: 002b:00007f01361f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.134287][ T6703] RAX: ffffffffffffffda RBX: 00007f01379e5fa0 RCX: 00007f013778f749 [ 137.134301][ T6703] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 137.134314][ T6703] RBP: 00007f0137813f91 R08: 0000000000000004 R09: 0000000000000000 [ 137.134381][ T6703] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.134393][ T6703] R13: 00007f01379e6038 R14: 00007f01379e5fa0 R15: 00007fffe005cdc8 [ 137.134414][ T6703] [ 137.134434][ T6703] Mem-Info: [ 137.169391][ T6703] active_anon:35091 inactive_anon:4804 isolated_anon:0 [ 137.169391][ T6703] active_file:18463 inactive_file:2454 isolated_file:0 [ 137.169391][ T6703] unevictable:2048 dirty:121 writeback:0 [ 137.169391][ T6703] slab_reclaimable:3646 slab_unreclaimable:68253 [ 137.169391][ T6703] mapped:29208 shmem:33367 pagetables:1252 [ 137.169391][ T6703] sec_pagetables:0 bounce:0 [ 137.169391][ T6703] kernel_misc_reclaimable:0 [ 137.169391][ T6703] free:1705827 free_pcp:10929 free_cma:0 [ 137.399493][ T6703] Node 0 active_anon:140712kB inactive_anon:19216kB active_file:73852kB inactive_file:9816kB unevictable:8192kB isolated(anon):0kB isolated(file):0kB mapped:122516kB dirty:484kB writeback:0kB shmem:135092kB kernel_stack:4752kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 137.427810][ T6703] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.457944][ T6703] lowmem_reserve[]: 0 2880 7859 7859 [ 137.463371][ T6703] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 137.494891][ T6703] lowmem_reserve[]: 0 0 4978 4978 [ 137.499955][ T6703] Node 0 Normal free:3866096kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140712kB inactive_anon:19216kB active_file:73852kB inactive_file:9816kB unevictable:8192kB writepending:484kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39680kB local_pcp:34060kB free_cma:0kB [ 137.533774][ T6703] lowmem_reserve[]: 0 0 0 0 [ 137.538357][ T6703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.551399][ T6703] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 137.567698][ T6703] Node 0 Normal: 1209*4kB (UME) 824*8kB (UME) 792*16kB (UME) 567*32kB (UME) 526*64kB (UME) 443*128kB (UME) 290*256kB (UM) 237*512kB (UM) 179*1024kB (UME) 96*2048kB (UM) 771*4096kB (UM) = 3866116kB [ 137.587412][ T6703] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 137.596851][ T6703] 55698 total pagecache pages [ 137.601595][ T6703] 1394 pages in swap cache [ 137.606036][ T6703] Free swap = 98360kB [ 137.610126][ T6703] Total swap = 124996kB [ 137.614369][ T6703] 2097051 pages RAM [ 137.618261][ T6703] 0 pages HighMem/MovableOnly [ 137.623006][ T6703] 81272 pages reserved [ 137.657683][ T6705] bridge0: left promiscuous mode [ 137.799266][ T6720] hub 9-0:1.0: USB hub found [ 137.804537][ T6720] hub 9-0:1.0: 8 ports detected [ 137.850491][ T6724] macsec0: entered promiscuous mode [ 137.855939][ T6724] bridge0: entered promiscuous mode [ 137.862472][ T6724] bridge0: port 1(macsec0) entered blocking state [ 137.869052][ T6724] bridge0: port 1(macsec0) entered disabled state [ 137.876311][ T6724] macsec0: entered allmulticast mode [ 137.881808][ T6724] bridge0: entered allmulticast mode [ 137.889561][ T6724] macsec0: left allmulticast mode [ 137.894671][ T6724] bridge0: left allmulticast mode [ 137.911943][ T6724] bridge0: left promiscuous mode [ 138.168734][ T6739] netlink: 'syz.1.803': attribute type 13 has an invalid length. [ 138.459851][ T6755] netlink: 'syz.5.809': attribute type 21 has an invalid length. [ 138.479192][ T6757] hub 9-0:1.0: USB hub found [ 138.484673][ T6757] hub 9-0:1.0: 8 ports detected [ 138.490918][ T6760] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 139.498877][ T6793] block device autoloading is deprecated and will be removed. [ 139.730277][ T6800] selinux_netlink_send: 13 callbacks suppressed [ 139.730297][ T6800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6800 comm=syz.2.826 [ 139.749019][ T6800] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6800 comm=syz.2.826 [ 139.766355][ T6800] __nla_validate_parse: 24 callbacks suppressed [ 139.766376][ T6800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.826'. [ 139.781670][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 140.084113][ T6806] serio: Serial port ptm0 [ 140.105715][ T6811] netlink: 176 bytes leftover after parsing attributes in process `syz.2.830'. [ 140.244822][ T6806] serio: Serial port ptm0 [ 140.575401][ T6835] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 140.595024][ T6835] bond0: entered promiscuous mode [ 140.600410][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.615368][ T6835] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 140.623193][ T6835] netlink: 224 bytes leftover after parsing attributes in process `syz.4.838'. [ 140.668559][ T6838] loop1: detected capacity change from 0 to 512 [ 140.676600][ T6838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 140.705878][ T6838] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.837: invalid indirect mapped block 4294967295 (level 0) [ 140.721801][ T6838] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.837: invalid indirect mapped block 4294967295 (level 1) [ 140.736369][ T6838] EXT4-fs (loop1): 1 orphan inode deleted [ 140.742254][ T6838] EXT4-fs (loop1): 1 truncate cleaned up [ 140.749175][ T6838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.763570][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 140.847343][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.890651][ T29] kauditd_printk_skb: 1199 callbacks suppressed [ 140.890672][ T29] audit: type=1400 audit(1767662279.025:33778): avc: denied { name_bind } for pid=6848 comm="syz.1.840" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 140.927889][ T6849] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.976957][ T29] audit: type=1400 audit(1767662279.115:33779): avc: denied { append } for pid=6848 comm="syz.1.840" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.008776][ T6849] vhci_hcd vhci_hcd.3: default hub control req: 000a v0009 i0001 l0 [ 141.107006][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 141.351789][ T29] audit: type=1400 audit(1767662279.475:33780): avc: denied { write } for pid=6854 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.389494][ T29] audit: type=1400 audit(1767662279.525:33781): avc: denied { setopt } for pid=6854 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.948155][ T29] audit: type=1326 audit(1767662280.085:33782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.0.842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c303af749 code=0x0 [ 142.037012][ T29] audit: type=1400 audit(1767662280.175:33783): avc: denied { read write } for pid=6870 comm="syz.5.846" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.060660][ T29] audit: type=1400 audit(1767662280.175:33784): avc: denied { open } for pid=6870 comm="syz.5.846" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.089525][ T3410] hid_parser_main: 8 callbacks suppressed [ 142.089545][ T3410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 142.106438][ T3410] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.156447][ T29] audit: type=1400 audit(1767662280.225:33785): avc: denied { name_bind } for pid=6870 comm="syz.5.846" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 142.177835][ T29] audit: type=1400 audit(1767662280.285:33786): avc: denied { listen } for pid=6870 comm="syz.5.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.216870][ T6876] loop5: detected capacity change from 0 to 2048 [ 142.247443][ T6876] EXT4-fs: dax option not supported [ 142.435071][ T6887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6887 comm=syz.2.849 [ 142.447627][ T6887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6887 comm=syz.2.849 [ 142.489837][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.849'. [ 142.498815][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 142.703213][ T6894] loop4: detected capacity change from 0 to 512 [ 142.715607][ T29] audit: type=1400 audit(1767662280.855:33787): avc: denied { mounton } for pid=6891 comm="syz.4.850" path="/169/file0" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.739705][ T6894] EXT4-fs: Ignoring removed oldalloc option [ 142.776408][ T6894] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.842703][ T6894] EXT4-fs (loop4): 1 truncate cleaned up [ 142.855797][ T6894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.942865][ T6894] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.958733][ T6897] vxlan0: left promiscuous mode [ 142.963883][ T6897] bridge1: left promiscuous mode [ 142.968870][ T6897] bridge1: left allmulticast mode [ 142.974077][ T6897] bridge2: left promiscuous mode [ 142.979056][ T6897] bridge2: left allmulticast mode [ 142.984526][ T6897] bridge3: left promiscuous mode [ 142.989511][ T6897] bridge3: left allmulticast mode [ 142.994949][ T6897] bridge4: left promiscuous mode [ 142.999997][ T6897] bridge4: left allmulticast mode [ 143.005214][ T6897] bridge5: left promiscuous mode [ 143.010191][ T6897] bridge5: left allmulticast mode [ 143.309075][ T6913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6913 comm=syz.4.855 [ 143.321770][ T6913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6913 comm=syz.4.855 [ 143.646588][ T6923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6923 comm=syz.2.858 [ 143.659215][ T6923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6923 comm=syz.2.858 [ 143.720009][ T6921] netlink: 660 bytes leftover after parsing attributes in process `syz.1.857'. [ 143.747359][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 144.351017][ T6921] infiniband syû: set down [ 144.355578][ T6921] infiniband syû: added bond_slave_0 [ 144.624423][ T6921] RDS/IB: syû: added [ 144.633849][ T6921] smc: adding ib device syû with port count 1 [ 144.663520][ T6921] smc: ib device syû port 1 has no pnetid [ 144.854452][ T6939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6939 comm=syz.0.861 [ 144.866914][ T6939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6939 comm=syz.0.861 [ 144.894142][ T6939] __nla_validate_parse: 1 callbacks suppressed [ 144.894162][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.861'. [ 144.909365][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 145.013277][ T6953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6953 comm=syz.0.866 [ 145.026005][ T6953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6953 comm=syz.0.866 [ 145.071322][ T6948] siw: device registration error -23 [ 145.127508][ T6955] loop1: detected capacity change from 0 to 512 [ 145.134587][ T6959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6959 comm=syz.0.869 [ 145.147015][ T6959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6959 comm=syz.0.869 [ 145.161939][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 145.170969][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 145.185859][ T6960] loop4: detected capacity change from 0 to 512 [ 145.231203][ T6962] binfmt_misc: register: failed to install interpreter file ./file2 [ 145.281003][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.295934][ T6962] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 145.331408][ T6960] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.363775][ T6960] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.868: corrupted inode contents [ 145.401600][ T6960] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.868: mark_inode_dirty error [ 145.430204][ T6960] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.868: corrupted inode contents [ 145.446126][ T6972] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.868: corrupted inode contents [ 145.459030][ T6972] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.868: mark_inode_dirty error [ 145.503280][ T6972] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.868: corrupted inode contents [ 145.520521][ T6972] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.868: mark_inode_dirty error [ 145.543692][ T6974] 9p: Bad value for 'port' [ 145.548762][ T6972] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.868: corrupted inode contents [ 145.578508][ T6972] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.868: mark_inode_dirty error [ 145.587537][ T6973] macsec0: entered promiscuous mode [ 145.595048][ T6973] bridge0: entered promiscuous mode [ 145.612170][ T6973] bridge0: port 1(macsec0) entered blocking state [ 145.618714][ T6973] bridge0: port 1(macsec0) entered disabled state [ 145.631158][ T6973] macsec0: entered allmulticast mode [ 145.636605][ T6973] bridge0: entered allmulticast mode [ 145.643001][ T6973] macsec0: left allmulticast mode [ 145.648089][ T6973] bridge0: left allmulticast mode [ 145.654486][ T6973] bridge0: left promiscuous mode [ 145.663419][ T6978] 8021q: VLANs not supported on gre0 [ 145.690182][ T6981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6981 comm=syz.2.875 [ 145.702741][ T6981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6981 comm=syz.2.875 [ 145.716803][ T6981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.875'. [ 145.725739][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 145.770255][ T6984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6984 comm=syz.0.876 [ 145.782802][ T6984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6984 comm=syz.0.876 [ 145.788458][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 145.804513][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 145.813523][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 145.888675][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'. [ 145.898908][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 145.898922][ T29] audit: type=1326 audit(1767662284.045:34010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 145.905091][ T6992] netlink: 'syz.2.879': attribute type 13 has an invalid length. [ 145.905452][ T29] audit: type=1326 audit(1767662284.045:34011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 145.953232][ T6989] bond0 (unregistering): Released all slaves [ 145.980125][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.980713][ T29] audit: type=1326 audit(1767662284.115:34012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 146.013721][ T29] audit: type=1326 audit(1767662284.165:34013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d8d5f749 code=0x7ffc0000 [ 146.075008][ T6999] loop4: detected capacity change from 0 to 512 [ 146.084177][ T6998] loop1: detected capacity change from 0 to 512 [ 146.096535][ T6998] EXT4-fs (loop1): orphan cleanup on readonly fs [ 146.106507][ T6998] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.882: bad orphan inode 13 [ 146.118397][ T29] audit: type=1326 audit(1767662284.265:34014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.2.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3d8d5f749 code=0x0 [ 146.123903][ T6998] ext4_test_bit(bit=12, block=18) = 1 [ 146.146794][ T6998] is_bad_inode(inode)=0 [ 146.150963][ T6998] NEXT_ORPHAN(inode)=2130706432 [ 146.155864][ T6998] max_ino=32 [ 146.159064][ T6998] i_nlink=1 [ 146.163569][ T6999] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.881: bg 0: block 248: padding at end of block bitmap is not set [ 146.169050][ T6998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.199354][ T29] audit: type=1400 audit(1767662284.335:34015): avc: denied { execute } for pid=6996 comm="syz.1.882" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.222171][ T6999] Quota error (device loop4): write_blk: dquota write failed [ 146.229688][ T6999] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 146.240391][ T6999] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.881: Failed to acquire dquot type 1 [ 146.253142][ T6999] EXT4-fs (loop4): 1 truncate cleaned up [ 146.259216][ T6999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.272233][ T6999] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.298064][ T7009] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 146.335340][ T7009] bond0: entered promiscuous mode [ 146.340938][ T7009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.356077][ T7009] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 146.365241][ T7011] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 146.385638][ T29] audit: type=1326 audit(1767662284.525:34016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 146.409539][ T29] audit: type=1326 audit(1767662284.545:34017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc388eaf749 code=0x7ffc0000 [ 146.438300][ T6998] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 146.441623][ T7011] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 146.478032][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.494593][ T7019] 8021q: VLANs not supported on gre0 [ 146.552246][ T7024] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 147.063007][ T7044] bond1 (unregistering): Released all slaves [ 147.088657][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.097558][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.109383][ T7047] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 147.161149][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.237167][ T7037] loop5: detected capacity change from 0 to 512 [ 147.372801][ T7058] 8021q: VLANs not supported on gre0 [ 147.423804][ T7061] netlink: 'syz.5.899': attribute type 10 has an invalid length. [ 147.435158][ T7061] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 147.456330][ T7061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.475230][ T7061] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.486725][ T4891] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:48d6:e3ff:fe9a:91c1 error=-28 [ 147.497843][ T7061] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 147.518890][ T7064] bond2 (unregistering): Released all slaves [ 147.714573][ T7073] serio: Serial port ptm1 [ 147.869419][ T7073] serio: Serial port ptm1 [ 148.469166][ T4893] Bluetooth: hci0: Frame reassembly failed (-84) [ 148.808462][ T7099] loop1: detected capacity change from 0 to 512 [ 148.823079][ T7099] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.832236][ T7099] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 148.844523][ T7099] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 148.866619][ T7099] System zones: 0-2, 18-18, 34-35 [ 148.880967][ T7099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.036082][ T7139] selinux_netlink_send: 14 callbacks suppressed [ 150.036097][ T7139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7139 comm=syz.2.920 [ 150.055007][ T7139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7139 comm=syz.2.920 [ 150.212512][ T7151] __nla_validate_parse: 19 callbacks suppressed [ 150.212532][ T7151] netlink: 76 bytes leftover after parsing attributes in process `syz.5.923'. [ 150.260260][ T7151] loop5: detected capacity change from 0 to 512 [ 150.287312][ T7151] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 150.320861][ T7151] EXT4-fs (loop5): 1 truncate cleaned up [ 150.327352][ T7151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.442668][ T3652] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.491781][ T5815] Bluetooth: hci0: command 0x1003 tx timeout [ 150.497899][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.947905][ T29] kauditd_printk_skb: 2240 callbacks suppressed [ 150.947922][ T29] audit: type=1326 audit(1767662289.085:36258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.018292][ T29] audit: type=1326 audit(1767662289.125:36259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.041989][ T29] audit: type=1326 audit(1767662289.125:36260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.065563][ T29] audit: type=1326 audit(1767662289.125:36261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.089451][ T29] audit: type=1326 audit(1767662289.125:36262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.112892][ T29] audit: type=1326 audit(1767662289.125:36263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.136368][ T29] audit: type=1326 audit(1767662289.125:36264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.159802][ T29] audit: type=1326 audit(1767662289.125:36265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.183343][ T29] audit: type=1326 audit(1767662289.125:36266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.206680][ T29] audit: type=1326 audit(1767662289.125:36267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7165 comm="syz.0.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c303af749 code=0x7ffc0000 [ 151.299558][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.397333][ T7171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7171 comm=syz.1.927 [ 151.409929][ T7171] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7171 comm=syz.1.927 [ 151.422622][ T7172] loop4: detected capacity change from 0 to 1024 [ 151.437904][ T7172] EXT4-fs: Ignoring removed nobh option [ 151.443557][ T7172] EXT4-fs: Ignoring removed bh option [ 151.461575][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.927'. [ 151.470523][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 151.505973][ T7172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.559269][ T7172] EXT4-fs (loop4): pa ffff8881075d54d0: logic 1, phys. 129, len 4 [ 151.567272][ T7172] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 151.645268][ T7183] loop5: detected capacity change from 0 to 512 [ 151.663216][ T7183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.682290][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.929'. [ 151.727565][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.735211][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.838887][ T7188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7188 comm=syz.0.932 [ 151.851483][ T7188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7188 comm=syz.0.932 [ 152.263840][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.277114][ T3006] ================================================================== [ 152.285254][ T3006] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 152.292075][ T3006] [ 152.294427][ T3006] write to 0xffff8881020b6618 of 8 bytes by task 3320 on cpu 0: [ 152.302086][ T3006] inc_diskseq+0x2d/0x40 [ 152.306359][ T3006] disk_force_media_change+0x9e/0xe0 [ 152.311666][ T3006] lo_release+0x2cb/0x400 [ 152.316021][ T3006] bdev_release+0x373/0x3d0 [ 152.320544][ T3006] blkdev_release+0x15/0x20 [ 152.325070][ T3006] __fput+0x29b/0x650 [ 152.329079][ T3006] fput_close_sync+0xad/0x190 [ 152.333776][ T3006] __x64_sys_close+0x56/0xf0 [ 152.338406][ T3006] x64_sys_call+0x2c25/0x3000 [ 152.343106][ T3006] do_syscall_64+0xca/0x2b0 [ 152.347641][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.353551][ T3006] [ 152.355891][ T3006] read to 0xffff8881020b6618 of 8 bytes by task 3006 on cpu 1: [ 152.363450][ T3006] block_uevent+0x31/0x50 [ 152.367833][ T3006] dev_uevent+0x375/0x400 [ 152.372194][ T3006] uevent_show+0x11a/0x200 [ 152.376639][ T3006] dev_attr_show+0x3f/0xa0 [ 152.381082][ T3006] sysfs_kf_seq_show+0x1a3/0x280 [ 152.386037][ T3006] kernfs_seq_show+0x82/0xa0 [ 152.390654][ T3006] seq_read_iter+0x31e/0x950 [ 152.395273][ T3006] kernfs_fop_read_iter+0xc1/0x330 [ 152.400417][ T3006] vfs_read+0x64c/0x770 [ 152.404583][ T3006] ksys_read+0xda/0x1a0 [ 152.408748][ T3006] __x64_sys_read+0x40/0x50 [ 152.413263][ T3006] x64_sys_call+0x2889/0x3000 [ 152.417980][ T3006] do_syscall_64+0xca/0x2b0 [ 152.422517][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.428430][ T3006] [ 152.430777][ T3006] value changed: 0x000000000000019f -> 0x00000000000001a2 [ 152.437889][ T3006] [ 152.440220][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 152.446405][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.455709][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.465788][ T3006] ================================================================== [ 159.211423][ T3488] page_pool_release_retry() stalled pool shutdown: id 42, 1 inflight 60 sec