last executing test programs: 10m57.492510297s ago: executing program 32 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1c1000, 0x20) finit_module(r4, 0x0, 0x3) (async) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/297], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc8) (async) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000180)={@rand_addr=0x64010102, @rand_addr=0x64010101, 0xffffffffffffffff, "0b823442e7c1f8a5d779720d64fb11f425621e6f54548d04192b6f87b754b30d", 0x4, 0x8000, 0x33, 0x1}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async) ioctl$SNAPSHOT_FREE(r1, 0x3305) 10m16.163533878s ago: executing program 33 (id=525): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdff, 0x100007, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x1000, 0x0, 0x8, 0x1, 0xe3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x1000) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r7, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f00000008c0)={r9, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000240)={r10}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={r10, 0x7}, 0xfffffffffffffe4f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 9m47.575317514s ago: executing program 34 (id=858): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00850023000020ca00"/23], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9m33.001010299s ago: executing program 35 (id=1081): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x7, 0x420003) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r4 = socket(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0xb}}}, 0x24}}, 0x800) (fail_nth: 2) 9m19.374470087s ago: executing program 36 (id=1237): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000}, 0x50) 9m3.794525373s ago: executing program 37 (id=1383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010141}, {0x2, 0x4a24, @remote}, {0x2, 0x4e21, @multicast1}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 8m53.295685249s ago: executing program 38 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8m52.242827363s ago: executing program 39 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0xfff, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 8m44.603367459s ago: executing program 40 (id=1588): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x3, 0x0, 0x800}]}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 8m44.59858957s ago: executing program 41 (id=1589): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$kcm(0x29, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x22020600) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 8m38.333422105s ago: executing program 42 (id=1652): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x8}, @queue={0x5, {0x0, 0x7}}}], 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)={{0x14, 0x3f5, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=',:\x00') syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x50d, &(0x7f0000000180)="$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") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) socket(0x1f, 0x2, 0x3e) io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x80, 0x24002, 0x185}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) 7m48.291284147s ago: executing program 2 (id=2270): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m48.234214732s ago: executing program 2 (id=2272): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) migrate_pages(0x0, 0x51, 0x0, &(0x7f0000000040)=0x42d4) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, 0x0) 7m48.154999018s ago: executing program 2 (id=2275): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r3, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB='\a\x00'], 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x67a0, 0x0, 0x0, 0x0, 0x6b60d6de}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x101, 0x42, &(0x7f0000000200)=""/66, 0x40f00, 0x1, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x3, 0x2f71, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)=[{0x5, 0x5, 0x4, 0x3}, {0x5, 0x5, 0x10, 0xa}], 0x10, 0x7f}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000d0004"], 0x44}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x1c}, 0x20) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="c340f64d", @ANYRES16=0x0, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x40600c0) 7m47.723760063s ago: executing program 2 (id=2280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 7m47.679775966s ago: executing program 2 (id=2281): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d000000000000000002000000000000000003000b020000000000"], 0x0, 0x3a}, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x3, &(0x7f0000000400)='roo4c\xbe\xb1\x8f/hi\"9\xf2\xe7\xe0\xa7/\x17\'?\xae)\x18\xb2r\xfc%(\xe4\x9c\f\xbf\xb5\x83\x18\xb6^X\xa0\xf6\xdd\x0f\x1d\xd0\x03\x14\xe3\x96\x0f\xc4\xd1\xdb\xfb\x8dU\x15\xcb\xf3f\xf2\xd0y3\vz/\\\xe9\xf5*\xa5\xdf\xdf\xbeP%4\xe0\xcc!\xff\x140\x8b\xdeX\xc4\xfe\x85\x80X\b\x1d\xe9T\x95K\xad\xaf@\x9b\xbb\xf4\x96c\v\xe0\x8dG\xe0~\xde\x86=\xc0\xd0 \xbf\xf8\x0f\xd7\x99\xb8\t\x8amhG\xb5_\\\x14$d\xf3\\]*>\xcf\x18\xcb!\xe9i\x01\xcd\x1e\xc6\x9d$d\x9f*@|\a\xe8\x17\xe8M2Z;\xd4\x03\xfe\x8a_G\xfd\xf8\xf2\xc1\x11\x9f\xfc)\xd5\xeaP\xe6\xaf|4ad\xd6\xca%0\xe0\xfcf[7m\xba\x1f\xff\x9e\xa3\xcd\x1e\xaaj\xd2Pp8\x19\vJl!K\xfd\xe7\x9f\x1d\'\xc6\xd2\xe2\xf2[+\x83+\x8b\x8c\xf7\xb4C\xac\x02\xc4\xbf\x89\x93l\x9b\xd6s', &(0x7f0000000300), 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x3800) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/35, 0x23) 7m47.50792122s ago: executing program 2 (id=2284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) 7m33.737743206s ago: executing program 43 (id=2277): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) msgsnd(0x0, 0x0, 0x0, 0xe800) 7m32.897265543s ago: executing program 44 (id=2284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) 6m58.192105899s ago: executing program 4 (id=2807): syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) fgetxattr(r2, &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000440)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) fdatasync(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0xffffffffffffffd3, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x54}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c041}, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x203, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1003, 0x7, 0x2, 0x3, 0x0, 0x3}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r4, &(0x7f0000001800)=ANY=[@ANYRES8], 0x16) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r3, r3, 0x2b, 0x0, @void}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, 0x0, 0x0, 0x1) 6m57.163823932s ago: executing program 4 (id=2819): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfff}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x800) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = creat(&(0x7f00000001c0)='./file1\x00', 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x104020, 0x7, 0x2, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}]}}}}}}, 0x3a) acct(&(0x7f0000000080)='./file1\x00') (async) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8000000000000, 0x13e, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x9f, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffc, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8000000000000, 0x13e, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x9f, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffc, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) (async) close(r0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000240), 0x4) (async) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000240), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r11}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r11}, 0x18) 6m56.739912546s ago: executing program 4 (id=2823): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000f724aa9d688da8b21c972f64490092c41413"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x3, 0x0, 0x800}]}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x6f, 0x301) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000180)={0x21, 0x3}) dup(r0) 6m55.364920117s ago: executing program 4 (id=2830): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2ed117b84b65e36ff85975ecb2a1cbc23b77994644a9160b5b90abce3948c0a1f01195f4cdcd19955fd2f4c61eab3c433c61180d77f346090000001ca9b6d31ea684dc65f180bc4f685f8bc8c21c9e84f7b4b2cb0ec8aa1e8d108ded552771c8383cacb3508fd75bc4ecca6948ab65d23edaceb6f16cb1e7cc4222d400f19f5998cb348d2c8fc07aefb8f636e77e0d97a4ef5b1eda80fc9d558402352797e9864bb6ac880978574b83e811f178579c4d3b8e69c71e74b92caa6b1a102c7cb3b68c0f9e3c48d9ba460c14874752a370e144a8663d046843f4065d94396d3deb8929e00e290a015c7204226ed01557f4f37d6731413c931db1636490303c521ceb5f080000000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) io_setup(0x7e, &(0x7f0000000080)=0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r8, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) sync() syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120052904000001020d000009240600014812987e052400df000d240f0101000000000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc2b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fef399d6af4b534dc62dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b01040300050601000209058103ff030604050904010000020d00000904010102020d0000090582020004f10209090503022000260d07"], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xad06, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 6m54.039947414s ago: executing program 4 (id=2840): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) r4 = dup(r1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)='8\x00', 0x2}, {0x0}], 0x2}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000000)={0xac0b, 0xf, [{0xc}, {0x2, 0x1}, {0xc, 0x1}, {0xd}, {0xe, 0x1}, {0x2, 0x1}, {0xf}, {0x8}, {0xd, 0x1}, {0xf, 0x1}, {0x9}, {0x4}, {0x2}, {0x2}, {0x2, 0x1}]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) 6m53.96246347s ago: executing program 4 (id=2842): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0xe7db}], 0x1, 0x40010121, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg(r7, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0, {[0x8]}}, 0x0, 0x8, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0xe7db}], 0x1, 0x40010121, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg(r7, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) r9 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) kcmp(r0, r0, 0x43130e7e508dd333, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x472, &(0x7f00000006c0)="$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") unshare(0x62040200) 3m20.939243567s ago: executing program 3 (id=4796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x60700, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) 3m20.873956083s ago: executing program 3 (id=4797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff83, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x8, &(0x7f0000000000), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$tun(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xb3) r5 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="00200007ffffffffffff00000000299078ac1ef200e0000001033fec9b284c93cf8c47bc98d93826d5200da2c96b67919fb5146b8da82ae0aeddf99df0c319ce533aae1c251ac7339bfdd7ac605ae7d453a1ea0d256046ff8604e6214ee6572f77d05fc59785cbd5de8ac291354a39a7a3e61c214a81be851edf2dc0"], 0x4e) 3m20.636120691s ago: executing program 3 (id=4804): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ce, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTH7UpjUbQVD0EvFgpJif1lbxYE5e9KR48bQk6Q9ME2lWsCVCBc8FQdCrR/8A8dKDgtW/wKtHkUKQJN5XZndmMybZtJtuHNl8PvDIe/M2+97MY2bfPN57AZxakxHxVkQMRcRsRNTy42ke4k47ZJ/b3d5cykISzeZ7fyWRRMTO9uZS8V1J/vdc/gVTaUT6RRLPH1Luxq3bH9VXV1du5umZxo2PZzZu3X7l+o361ZWrK2sLC/Pzly/OXnrtct/O9evNdz/84fe3d765M/5Mfbl2N6vv+TyvfB79MhmTnWuy3+v9LqxiT5TiyXCFFQEA4Ehp3vcfbvX/azEUe523Wtz9udLKAQAAAH3RbBZ/AQAAgMGVePcHAACAAVfMA9jZ3lwqQoXTEfiPbS1GxES7/Yv13e2c4c6a3pF963v7aTIi/p76/uUsxAmtwwYAAAA4zX5cbG/8d3D8L41nS587GxFjxd5+fTS5L31w/Cd90OciKdlajHiztLfjbqn9cxNDeerJ1lDhSHLl+urKbESMR8RUjJzJ0nNHlDH+xh/3uuWVx/+ykJVfjAXm9XgwfObf/7Ncb9Qf55zZs/V5xHPDh7V/0hnzLe+TeRyfXfvyWre8h7c/J6n5bcRLh97/ezuXJkfvzzrTeh7MFE+Fg9bu3X+hW/nav1rZ/T92dPtPJOX9ejd6L+OD++d/65Z33Of/aPJ+q4Kj+bFP643GzbmI0eSdg8fne6/zoCquR3G9svafevHw3/+i/5fkv/3jpf2he/HTL7uXuuW5/6uVtf9yT/d/75GLv353oVv5j3b/v9qqzFR+RP/v4R61gaquJwAAAAAAAAD9kbbm9iXpdCeeptPT7Xm+T8dYurq+0bhwZf2TteX2HMCJGEmLmV610nzQufYy8k56fl96ISKeioivamdb6eml9dXlqk8eAAAATolzXd7/M38eZ7EHAAAA8P80UXUFAAAAgBPn/R8AAAAG2uPs6y8iIjKokaqfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn2z8BAAD//yly2dE=") r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x60, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x60}}, 0x810) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x1f, r4, 0x1, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) fcntl$setsig(r3, 0xa, 0x3d) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') 3m20.435231438s ago: executing program 3 (id=4808): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='f2fs_truncate_partial_nodes\x00', r5, 0x0, 0xb6}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x681c1, 0x0) 3m20.113574304s ago: executing program 3 (id=4814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "a9a9f902", "8891ea13f18ef0be"}, 0x13) listen(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000982500010a28bd700000000000190000034ca2b2274d87665152000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x21, 0x2, 0x10000000000002) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000080)=0x2) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d6163767461"], 0x54}}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m20.079380287s ago: executing program 46 (id=4814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0xee01, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "a9a9f902", "8891ea13f18ef0be"}, 0x13) listen(r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000982500010a28bd700000000000190000034ca2b2274d87665152000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x21, 0x2, 0x10000000000002) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000080)=0x2) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00', r7}, 0x10) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d6163767461"], 0x54}}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.976267937s ago: executing program 5 (id=5277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x24, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x4, 0x3}) close(r1) 2m24.909188473s ago: executing program 5 (id=5278): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync_file_range(r3, 0x5, 0x7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) listen(r1, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000900)=""/257, 0x101}, {&(0x7f0000001d80)=""/164, 0xa4}, {&(0x7f00000002c0)=""/243, 0xfffffe24}], 0x3, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x10) r7 = accept4$unix(r1, 0x0, 0x0, 0x800) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r8, 0x8, 0x0, @val=@netfilter={0x7, 0x1, 0x7ff, 0x1}}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0x40000, 0x120, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{0x8, 0x2, 0x72, 0xfffffffb}, {0xf000, 0x0, 0xe9, 0xffff}, {0x6, 0xff, 0x0, 0x81}, {0x0, 0x7, 0xa9, 0xf}, {0x246, 0xc, 0x2, 0xf59}, {0x3, 0x21, 0x6f, 0x5}]}) 2m24.69414384s ago: executing program 5 (id=5282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000030000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000ed2eabd8e558c5c611000100000000000000260e0000000a"], 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd3180020060120010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800002e66e28200c3000000050000"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe07, 0x0, &(0x7f0000000000)="26f8a0bf423ba61db01dcc101f3755384d7692c9e2b2ef9783f2d275f869933df9e97e0293a94ae8151e914e4cc50504094bc507b970f24b7e23af995eebac104d27b0564ff3985422ed5473ca4b38ff0fa99e1e982204c18e6442f8f95c2227ba69178d9398e4", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffff1f, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000080}]}}}]}, 0x40}}, 0x20000012) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000007d0800038004000380080005"], 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x5, 0x8, 0x1b, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0x3, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x23a4, r10, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-,#\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ':/,:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2cf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^-+]%{(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x104, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "03699f09148fa4457761bed0716aeafb60f583831522f78b77dab7cf24fe513b4e888f033b8e0e550937634d9d9a5f60495740582131e27c33cdc24546bcf21986ff82d63ba593aedb71ee3aa1a964084a3965b55d8faa654f9e99f6df75e5b05cda87da30d231eaa9ae2b21288b5e7be434460e073976a636eb04d33767ef0a3f7e66ac6be4f4810cd4578c9fd11d150dfc92e25029ae5bab9032e4a8f5647945b2a56432e40596c416f4614f72a19988da9fb3732ffb81ad8dcc012ae5d33be3caf8eaa2877ab6fd003f41b5c72b309dc92c73ef612b175d3a4c3beafb3c8711a256d19b733764ed82d13bfb6be7d5f814ff069bff35"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x70, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x63, 0x5, "0ebe33bcb0dc7f4fc0e33776748001b06a678fc4a67d1931f5014a5f1d4eb4899bd23007c2a887ede76d76e145aadcc887097dee27b2ef87dc8308a4c091056878e860e92cb6ab33b723ed63dc054487c746966076e00bfc89c50fc1e5c208"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2c5}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}*]*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x1008, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x23a4}, 0x1, 0x0, 0x0, 0x48804}, 0x880) 2m24.387877025s ago: executing program 5 (id=5284): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x18) setitimer(0x0, 0x0, 0x0) (async) setitimer(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) fcntl$addseals(r6, 0x409, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="020320001300000000000000000000f80300030000000000000000000000000000000000000000010000000000000000030006000000000002004e2064010100000000000000000004000000000000000001ffffffffffff0000000000000000000000000000000002000100000000000002004e21ffffffff000000000000000001001800055f001b0000000000000000000000000000006761b305d2b818a86e9988ad8952a0624df371e62078096db83df96032a764ea171badcc01e03a4cd69269c661c914a1196ac285a9ead05d2d"], 0x98}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x3}}, {@dax_inode}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@nodioread_nolock}, {@oldalloc}, {@nojournal_checksum}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x96f4}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x3}}, {@dax_inode}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@nodioread_nolock}, {@oldalloc}, {@nojournal_checksum}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x96f4}}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) timer_create(0x5, &(0x7f0000000180)={0x0, 0x2c, 0x1, @thr={&(0x7f00000008c0)="1348f3f8a4a05cb412c23c14f803397f1ee6d33bf09331eb8d02b7e8cd970a835b45b0df45f001bcbea802ee1307b8523ec89e091517e541e79031a567528043e2a1be8ef72718c70b7e13f5553ffec3dae140b73a1e6004163c43771e05f97f64f3507e7ac11f025c546eee8c53214f02d7a79bc9c45a4527e38d00a048af25b155e782d52b1c72", &(0x7f0000000000)="83e6358e510e89bf54e23160c2a806febb"}}, &(0x7f00000002c0)) unlink(&(0x7f0000000140)='./file1\x00') (async) unlink(&(0x7f0000000140)='./file1\x00') r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2517000000480006"], 0x5c}}, 0x4004) 2m24.131239435s ago: executing program 5 (id=5286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000f100f1786ca835537536fa6e918d437865ad41983ffb2be2ccc3fb0a1ef86e23ac2c8cd6e708b01d33077d1c4dfe5f6e27"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRES8], 0xc) pread64(r3, &(0x7f0000000180)=""/73, 0x49, 0x0) 2m22.867863957s ago: executing program 5 (id=5296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x4000, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x83f6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) 2m22.811459932s ago: executing program 47 (id=5296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) fallocate(0xffffffffffffffff, 0x0, 0x4000, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) syz_io_uring_setup(0x416d, &(0x7f00000010c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x83f6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) 2m0.783741567s ago: executing program 8 (id=5587): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@private, @private}, &(0x7f00000004c0)=0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd84, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x3, 0x87, &(0x7f0000000640)=""/135, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xe, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000007c0)=[{0x2, 0x1, 0x7, 0x1}], 0x10, 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000005000000000000000002000000010200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="0500000000000000040000000500"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000003000000010000000600000000200000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000e4050a7d9de48f0004000000012ec58e3580cfcda957000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%+9llu \x00'}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a80)='net/llc/core\x00') r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0xdc) r7 = open_tree(r4, &(0x7f0000000240)='./file0\x00', 0x88101) fspick(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x23, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000008000082b40000000008000018110020", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300008f05a6daa4e6556c28db8251ae052d3d99c7d290a9a926bcd8af8e8b9f3826b96df915c45d5689fdc5d6289204b45320cb79eceb4bd18ecb379fff4c131a2bc39bb8bbfa77429fd8944818437053af395f83", @ANYRES32, @ANYBLOB="000000000000000504000863894ce4000000a50000003702f0fff0ffffff850000000e0000040000000000000000181e0000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7ff, 0x5f, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x802}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xc, 0x9, 0x5}, 0x10, 0x0, r0, 0x4, &(0x7f0000000ac0)=[r1, r2, 0x1, r3, r4, r6, r7, r8], &(0x7f0000000b00)=[{0x0, 0x1, 0x0, 0x6}, {0x1, 0x2, 0x1, 0x3}, {0x800003, 0x3, 0x2, 0x3}, {0x0, 0x5, 0xc, 0x8}], 0x10, 0x10}, 0x94) r9 = inotify_init() r10 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r11 = inotify_add_watch(r9, &(0x7f0000000200)='./file0\x00', 0x400008bf) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r11], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r14 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r14, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x3, 0x100}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12, 0x0, 0x4}, 0x18) write$binfmt_elf32(r10, &(0x7f0000000040)=ANY=[@ANYRES64=r11], 0x69) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) close(r10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2m0.681564415s ago: executing program 8 (id=5590): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x5d6c}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 2m0.555850635s ago: executing program 8 (id=5593): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 2m0.547928426s ago: executing program 8 (id=5595): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x1000404, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x8000}}, {@showassoc}, {}, {@dmode={'dmode', 0x3d, 0x70000000}}, {@utf8}, {@check_strict}]}, 0x5, 0x571, &(0x7f0000001180)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x8}, 0x18) 2m0.481178891s ago: executing program 8 (id=5598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fc0100000000000000000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff030000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000200cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) 1m59.528015668s ago: executing program 8 (id=5615): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000007ff0000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000de51a86c794a75347a27a4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r8) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x200400, 0x0) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x200400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000480)={'dummy0\x00', 0x1000}) r10 = fsmount(r7, 0x0, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x25, 0x11, @val=@iter={&(0x7f0000000700)=@task, 0x10}}, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) tee(r4, r10, 0xffffffffffffff7f, 0x3) (async) tee(r4, r10, 0xffffffffffffff7f, 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x600, 0x1000}}}}}}]}, 0x48}}, 0x4000000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) (async) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 1m45.095378651s ago: executing program 48 (id=5615): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000007ff0000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000de51a86c794a75347a27a4"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000240)=r8) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x200400, 0x0) (async) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x200400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000480)={'dummy0\x00', 0x1000}) r10 = fsmount(r7, 0x0, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x25, 0x11, @val=@iter={&(0x7f0000000700)=@task, 0x10}}, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f0000000200)='./file0\x00', 0x414f02, 0x52abe154ad664fa4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) tee(r4, r10, 0xffffffffffffff7f, 0x3) (async) tee(r4, r10, 0xffffffffffffff7f, 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x600, 0x1000}}}}}}]}, 0x48}}, 0x4000000) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) (async) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 4.253766367s ago: executing program 1 (id=7169): r0 = io_uring_setup(0x6dc6, &(0x7f0000000080)={0x0, 0xe28b, 0x8, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_context(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000240)='syzkaller\x00', 0x1f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x8080) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r6, r7+10000000}) listen(r1, 0x80005) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000800)) 4.130780698s ago: executing program 1 (id=7173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050) 4.095099801s ago: executing program 1 (id=7175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.064124473s ago: executing program 1 (id=7176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x2}, 0x7) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000640)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800700, &(0x7f0000000a00), 0x83, 0x472, &(0x7f0000001380)="$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") chdir(&(0x7f0000000400)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '//[,{\x87&', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2f) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/98, @ANYBLOB="0e17913c530e7fbee9c431144a00315497b4ad770de289d690c2909cd10ef5fe02c3b7da6077f7ed7b8fcca6a04852cbeb4c45f364f5e92899fe3dc020418efdf6a94c7b0fe0602b8a592ba6c9207553283d77bdc851c968d51180cf74cf8341627d5cd0f7253fb908d661cf929e4a48954abea59b873c6de80ddc9b14da94ae8adba4fc7818736f5bec4302b90bdfdef2a31f0e50e4ac7e037d04970b0c15b85190bacfe58b9b9573cddb3e6baa94740a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x180}}, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) 2.573608513s ago: executing program 6 (id=7208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000380)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x8) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r5, r5) keyctl$chown(0x4, r2, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000326bd7000fedbdf250e000000440004802c00078008000300020000000800030004000000080003000000000008000200e20a000008000300090000001300010062726f616400005982396c496e6b0000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) request_key(&(0x7f0000001100)='logon\x00', &(0x7f00000010c0)={'syz', 0x3}, &(0x7f0000001140)='\x00$\x8a\x9e[U\xcf\x80#\x81v{?\x97\x18\x16?Bx\xee\xae\xb5\xbekl,\x1f\x1e\xda\x19\xf9\t\x02\'\xed\xb8\x9f+<\xe2\x89\x89\xfa\xf3\x96\\E\xdb\xffk\x15\xaen\xd7H(\xfa\x92\x1e\x1c\x16o\x91\xff\xb9\xd0\x80}p\xc6EL\xe1\xa6.\xdb*9 \xea\nm,\xab\xa1n\x9e4z\xd5\xa7\xce\x98G\xa9\x90^\x9d\bM\xc8\xc5\";\x81\xb0\x82\vx\xa2[>\xd0]\xd5', r5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x839eef59733fa2ad, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.156348456s ago: executing program 6 (id=7212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000003c0)="63d7a977a2fba150716e1b5460a916a6bdf602332237bdab0e1c5e9c91c03f473d9687bb3cd51a52085c2f95e957c34e6267cee2519ab9b545f324be124251512593381701efbf1cf8f78c2c7fab2822e5ef2d3a47cefc5ede02", 0x5a}, {&(0x7f00000004c0)="7dfcac44c09ba1b8050d8df34633944156f3190123dc6b95707ecbee8a096e026f902c8f897b68dc38be951bcf6417df2a662c3e208dfc7e16e8e04671c7cff3be2e397cf34cf3dbdb424f01e9744fd1ee2855e98ebef099dddbf8f5f0c6721ace4eeadcd9b0111c56ee3ca0c8ceffee7bf68efa39933daab0d5c5", 0x7b}, {&(0x7f00000005c0)="3ae41290ed895db767092b62a2d8bdb04f968a11776421cd5225cf6d26673ae01798dcf632328b53f0d1b7f2ea7e41b746b09ffffd22013bc2931a9028079ec4f997c364b3e1be0bce6db217837a368f765ef429c53cb1cf99c0fa7080ac0f4bc39c794fbf3777b396c5", 0x6a}, {&(0x7f0000000680)="d2689cb21fafee747e44096bf18aec9dd7e644bc6a855800c30dc529cb850e91227331d53c5ccf0b8997c1ac1b51e183e4bec6371c5541f8eb6f561287168a5687a7fb2c55b5338dcd35a7b81f590398b8f105f4ddecd4c050bc5469ede03d04873d69540de6049fc63a76b4fd6cf3170a30afc43049ae6dc03a2b72b56bbb9ccf26ac56d0c1a399759d235360a6c4fdec0fe0681a96c60f97806351b2ae7e6ee82783338969b52f7fd911639abad9bb4906b51c0779827c7af78161", 0xbc}, {&(0x7f0000000740)="c8a2f016135ea40b7d5416415d65a7765e8e44350c890478fff1b218258a983b7ff31c24a50c65fab4d18758685550e94e9ad3cd44f273b39d1c2243ce0ba6347ee9590203395411161890fc6e475721a01f8d8792863e0a524b28bbac6792da5e0bf33aa466802b15f6c640e86189311cae800fc2967ca40da21052fd8136a3e9e01454b08fdfa3a45fba51a8ad40ccd04aab650d6fa6075921054ca9a7df76fb90441d84a0050eb9b07df79b37e93e1c06e08ae4", 0xb5}, {&(0x7f0000000800)="496061db2eba0bf9e65e3ec5f01a2462b0909ca6c1e33337aa27d894aec561ee3323f105008c1f3ce0cd5026c09381c3042f257de2679b8ec4e0b0f677f1b7a33222cccced3fdc09dba5be56860a2fce6b0a38e71b3f5debabb9686230e2ac8fe85705275db453e317265d4423888092723984f0c2d5605d69ca5e5609b79d53841189ee6294b7f2c10b4b2364ce04ea18bfe9", 0x93}], 0x6, &(0x7f0000000940)=[@ip_retopts={{0x50, 0x0, 0x7, {[@end, @ssrr={0x89, 0xf, 0x94, [@dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @local]}, @ssrr={0x89, 0x3, 0x9e}, @timestamp={0x44, 0x8, 0x8c, 0x0, 0x4, [0x78a]}, @timestamp_addr={0x44, 0x24, 0xe0, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@private=0xa010102, 0x1}, {@remote, 0x5}, {@multicast2, 0x40}]}]}}}], 0x50}, 0x20000080) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000000)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x18) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r5, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f00000000c0)=0xfffffffffffffeb2) 2.067662704s ago: executing program 0 (id=7214): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,nodots,nocase,dots,nodots,debug\x00\b\x00\x00s,nodots,quiet,\x00'], 0x1, 0x166, &(0x7f00000001c0)="$eJzs3DGr01AUB/DTvuB74vJmcQgI4lTUyVGRJ4gFRemgk8LTpZWCXaJTP4pfUJAO0kG40kYaCS1SaJr6+vstPfTf25w7JJcbSN7d+jS8HE8+jl/O4qzTiexR5DHvxHl04yRK06g5rX8BAPxP5inFj5RSOp3G9W+RUmq7IwCgadZ/ADg+/1z/H7bUGADQGPt/ADg+r9+8ff643794lednEd+nxaAYlJ9l/vRZ/+JevnRejZoVxeBkld8v83wVZ9UvF/mDer4cfy3u3i7zRfbkxV+DlvmNuGxw3gAAAHBMevnK2v19r7ch7/4pq/sDtf19Fjezfc0CANjG5MvX4fvR6MPn3RTdHf3PXoufqXQo/WxX3DmMNhRXrGj7ygQ0rTrp2+4EAAAAAAAAAAAAAADYZB+PE60/8i/vGgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA1vwMAAP//9B1W4Q==") r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x8c7) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000340)={0x20220080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) msgget(0x2, 0x210) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x8c00) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000400)=r4}, 0x20) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) 2.067438194s ago: executing program 7 (id=7215): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x6}, 0x8) 2.067127254s ago: executing program 6 (id=7216): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.030968797s ago: executing program 7 (id=7217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = syz_io_uring_setup(0x590, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3b7}, &(0x7f0000000200)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r7, 0x400, 0x1) fremovexattr(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="746480cdfce975d65744437275737407002e00"]) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 2.023997747s ago: executing program 6 (id=7218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x610}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1.659918597s ago: executing program 6 (id=7222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) recvfrom$x25(r3, &(0x7f0000000000)=""/5, 0x5, 0x0, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 1.659404917s ago: executing program 0 (id=7223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000380)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x8) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r5, r5) keyctl$chown(0x4, r2, 0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, 0x0, 0x4000004) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000326bd7000fedbdf250e000000440004802c00078008000300020000000800030004000000080003000000000008000200e20a000008000300090000001300010062726f616400005982396c496e6b0000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) request_key(&(0x7f0000001100)='logon\x00', &(0x7f00000010c0)={'syz', 0x3}, &(0x7f0000001140)='\x00$\x8a\x9e[U\xcf\x80#\x81v{?\x97\x18\x16?Bx\xee\xae\xb5\xbekl,\x1f\x1e\xda\x19\xf9\t\x02\'\xed\xb8\x9f+<\xe2\x89\x89\xfa\xf3\x96\\E\xdb\xffk\x15\xaen\xd7H(\xfa\x92\x1e\x1c\x16o\x91\xff\xb9\xd0\x80}p\xc6EL\xe1\xa6.\xdb*9 \xea\nm,\xab\xa1n\x9e4z\xd5\xa7\xce\x98G\xa9\x90^\x9d\bM\xc8\xc5\";\x81\xb0\x82\vx\xa2[>\xd0]\xd5', r5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x839eef59733fa2ad, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.635452269s ago: executing program 7 (id=7224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@grpjquota}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@noblock_validity}, {@discard}, {@nolazytime}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x4f7, &(0x7f0000000dc0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.582891603s ago: executing program 9 (id=7225): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000040)={0x7fffffff, 0xd, 0x0, 0x1, 0x1, 0x0, [{0x4, 0x100000, 0x8, '\x00', 0xc01}]}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) pipe2$9p(0x0, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x8000) 1.526542287s ago: executing program 7 (id=7226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = semget(0x3, 0x1, 0x22) semtimedop(r1, &(0x7f0000001700)=[{0x0, 0xca2, 0x1000}], 0x1, &(0x7f0000001780)) getgroups(0x3, &(0x7f00000018c0)=[0xee00, 0xee01, 0x0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000001b00)={{r0}, "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"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r15, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r16}, 0x18) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r17, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20050000}, 0x10) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000001900)={{0x3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x18, 0x6}, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000440)=""/4096) 1.443990124s ago: executing program 9 (id=7227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)={0x0, 0x6}, 0x8) 1.413489596s ago: executing program 9 (id=7228): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001, 0x200}}, './file0\x00'}) syz_open_pts(r0, 0xa0000) getpeername$unix(r0, &(0x7f00000010c0), 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x100, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) 1.378896979s ago: executing program 7 (id=7229): process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000b40)={&(0x7f0000000180)=@ll, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/224, 0xe0}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/160, 0xa0}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000940)=""/103, 0x67}, {&(0x7f0000000400)=""/49, 0x31}], 0x7, &(0x7f0000000f80)=""/4096, 0x1000}, 0x40002002) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0xffdffff8, 0xffffffff, 0x5, "ff000000000000000000000000000200"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000c00000002003b98bed60600000000000000000400f8000000008dbe691232c596b8a96412f7eb9c4c3096be7e350f1869294930160ee3ecc4e93f311f95ceb866921a9687b86c8c7daace550e0f5193250060780bdce61c667d8827fb1f390af302bf09000000ebe2d57d14d08145aebefa62fa7efd8d3ea53719da3e8f0864d818abd433b9813814d2547568f927c724b3dcae501001eee6bffefbad054076bd"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000080f2d3b6bafc94aa60970bd9890dfa1fb8b9706c9cd71dd908ea9a7dbaf8233ee2b7caad80dbb861e71603caaf25aa1fa7cb250d7798b1a315d083884b8d558936bb7aa74a3b89adf25d9b468029492b6a6973b2f4e56f20361d9546ae18ed99b2c0b56af1185abe2e89e9531f96b182"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3}, 0x10}, 0x94) r5 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") setxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000001600)=ANY=[@ANYBLOB], 0x381, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c0000000000"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2, 0xff}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 1.334155793s ago: executing program 9 (id=7230): socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000200), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2c"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 955.387533ms ago: executing program 7 (id=7231): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30"], 0x122}}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, 0xfffffffffffffffd, 0x488280, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) creat(&(0x7f0000000580)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 815.770944ms ago: executing program 6 (id=7232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000cfc03000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18001000000000000000000000000044d800ed00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES64=r1], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000009000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x8, 0xaa, &(0x7f0000000080)=""/170, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x3, 0xdc, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0xfff, 0x8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x1f, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000852000000200000018260000", @ANYRES32=r0, @ANYBLOB="000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000008600000018130000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[r0, r0, r0, r0, r3, r0, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x3, 0x5, 0x10, 0xc}, {0x2, 0x3, 0x5, 0x5}, {0x2, 0x4, 0xe, 0x3}, {0x5, 0x1, 0x4, 0x5}, {0x1, 0x4, 0xb}, {0x4, 0x2, 0xf, 0x7}], 0x10, 0x1ff}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000004002000000000000000000000000e00000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fedcfe"], 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x4000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x9, 0x10, &(0x7f0000000540)=ANY=[@ANYRES16=r0], &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000780)='kfree\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x27) r10 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000840)={'ip6gre0\x00', r9, 0x4, 0x7b, 0xff, 0x40, 0x40, @private2, @remote, 0x700, 0x700, 0x9, 0xf1}}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) 578.340854ms ago: executing program 0 (id=7233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x41, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='cachefiles_mkdir\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x68, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async) syz_emit_ethernet(0x68, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 450.346634ms ago: executing program 9 (id=7234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = syz_io_uring_setup(0x590, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3b7}, &(0x7f0000000200)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r7, 0x400, 0x1) fremovexattr(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="746480cdfce975d65744437275737407002e00"]) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)=r9}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 375.93187ms ago: executing program 0 (id=7235): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e690e400210061010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) inotify_init1(0x0) sendto$inet(r5, 0x0, 0xf4ff, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 279.351348ms ago: executing program 0 (id=7236): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000040)={[{@grpjquota}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@noblock_validity}, {@discard}, {@nolazytime}, {@grpid}, {@noauto_da_alloc}]}, 0x0, 0x4f7, &(0x7f0000000dc0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 189.945575ms ago: executing program 1 (id=7237): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) clock_adjtime(0x0, &(0x7f0000000880)={0x2, 0x2, 0x2fb3, 0x2, 0x7fffffff, 0x6, 0x4, 0x2, 0x3ff, 0x400, 0x5, 0x400000101, 0x2, 0x890a1, 0x6d0a, 0x0, 0x10, 0x3, 0x4, 0x9, 0x9, 0x9, 0x5, 0x4, 0x101, 0xfffffffffffffffe}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000040000000080060091fc8fbce9012400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x128, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x10, 0x9, 0xe, 0x10da, 0xa760, 0x0, 0x10, 0xfc, [{0xffff8001, 0xf073, 0x4010000, 0x8000}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x2, 0x9, 0x2}, {0x2008, 0x80000000, 0x1e0a}, {0xffffffff, 0x9, 0x800, 0x100}, {0x5e3, 0x4, 0x8e, 0x3}, {0x2, 0xffffffff, 0x5, 0x1ad}, {0x1, 0x5, 0x5127, 0x800}, {0x6, 0x1, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x2, 0x8, 0x6, 0x201}, {0x5, 0x406, 0x2, 0xfffffeff}, {0x94b0, 0x81, 0x80000001, 0xfffffffc}]}}, @TCA_U32_INDEV={0x14, 0x8, 'gre0\x00'}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x3, 0x1, 0x49, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, 0x0, 0x700, 0x5, 0xd7}}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r9}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd652170a40008000100000000000000000000ffff0a010100ff0200"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x700, 0x7800, 0x8, 0x51e, {{0x7, 0x4, 0x2, 0xc, 0x1c, 0x67, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@ssrr={0x89, 0x7, 0x17, [@local]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001800000000000009b000000186700000f0000000000009a4ce22a01c8d0594b00f7ffffffcd91e0ff010000"], &(0x7f0000000200)='syzkaller\x00', 0xfffffff8, 0x17, &(0x7f00000002c0)=""/23, 0x41000, 0x40, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x10, 0x97, 0x5}, 0x10, 0x1181d, r6, 0x1, &(0x7f00000005c0)=[r6, r7], &(0x7f0000000680)=[{0x3, 0x2, 0x1}], 0x10, 0xa2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="d7b372057fbfa42cd463d6f8d3a40f9d0fdf4eb010504034a916bd86a7a3074941975f60ee61438e8c733d35b5a531c283611e6a781d9c7768a75c9521b94596eb1cff9975042b7ff21b5588ac401dcc3ccefc290deb731f3f8dea69266a601e69c7789fefe2da00489c987aa85fde741023bf77552faf2710e75939d16418271c86f64b36b2161ca33dc0f34abbb3b0b8fa582d1a65365efc3306c54ddbd414e97590ad14a3439d253ee2d8dc381501bf6825574685285f81e4eb620bad07dc70472869058b4973d120b16c214d03aff8d4215811c2a2d75dc69ae5d4e4f3b5d5454d212ac5a455a508", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}, 0x94) 152.360588ms ago: executing program 0 (id=7238): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 78.337274ms ago: executing program 9 (id=7239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) io_uring_enter(r1, 0xed6, 0x8282, 0x34, &(0x7f0000000040)={[0xfffffffffffffff0]}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1f"], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) lremovexattr(0x0, 0x0) 0s ago: executing program 1 (id=7240): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001, 0x200}}, './file0\x00'}) syz_open_pts(r0, 0xa0000) getpeername$unix(r0, &(0x7f00000010c0), 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x100, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0xe000001a}) kernel console output (not intermixed with test programs): 80][T23488] loop7: detected capacity change from 0 to 164 [ 638.463846][T23491] loop1: detected capacity change from 0 to 164 [ 638.482231][T23488] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 638.513920][T23488] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 638.610143][T23492] loop9: detected capacity change from 0 to 512 [ 638.769695][T23492] lo speed is unknown, defaulting to 1000 [ 638.803038][T23492] lo speed is unknown, defaulting to 1000 [ 638.964006][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.375777][T23513] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6253'. [ 639.505916][T23524] loop9: detected capacity change from 0 to 164 [ 639.524675][T23518] netlink: 'syz.6.6249': attribute type 10 has an invalid length. [ 639.537827][T23524] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 639.554026][T23524] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 639.586961][T23518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.599091][T23518] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 639.675651][T23527] loop1: detected capacity change from 0 to 512 [ 639.694137][T23527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.730007][T23518] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6249'. [ 639.746179][T23527] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.6257: invalid indirect mapped block 4294967295 (level 0) [ 639.765549][T23527] EXT4-fs (loop1): Remounting filesystem read-only [ 639.783478][T23527] EXT4-fs (loop1): 1 orphan inode deleted [ 639.790035][T23527] EXT4-fs (loop1): 1 truncate cleaned up [ 639.817235][T23527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.078309][T23527] lo speed is unknown, defaulting to 1000 [ 640.097440][T23534] loop9: detected capacity change from 0 to 8192 [ 640.110771][T23527] lo speed is unknown, defaulting to 1000 [ 640.192686][T23534] loop9: detected capacity change from 0 to 1024 [ 640.216913][T23534] EXT4-fs: inline encryption not supported [ 640.231459][T23534] EXT4-fs: Ignoring removed bh option [ 640.698796][T23539] lo speed is unknown, defaulting to 1000 [ 640.755881][T23539] lo speed is unknown, defaulting to 1000 [ 640.767744][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 640.767763][ T29] audit: type=1400 audit(667.743:113084): avc: denied { read write } for pid=20740 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.799965][ T29] audit: type=1400 audit(667.743:113085): avc: denied { read write open } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.825562][ T29] audit: type=1400 audit(667.743:113086): avc: denied { ioctl } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.875531][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.975810][ T29] audit: type=1400 audit(667.858:113087): avc: denied { unmount } for pid=22033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 640.996248][ T29] audit: type=1400 audit(667.932:113088): avc: denied { read write } for pid=22033 comm="syz-executor" name="loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 641.021503][ T29] audit: type=1400 audit(667.932:113089): avc: denied { open } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 641.046166][ T29] audit: type=1400 audit(667.942:113090): avc: denied { ioctl } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 641.074458][ T29] audit: type=1400 audit(668.016:113091): avc: denied { map_create } for pid=23542 comm="syz.1.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 641.095039][ T29] audit: type=1400 audit(668.016:113092): avc: denied { perfmon } for pid=23542 comm="syz.1.6262" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 641.117040][ T29] audit: type=1400 audit(668.016:113093): avc: denied { map_read map_write } for pid=23542 comm="syz.1.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 641.177597][T23549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6266'. [ 641.666980][T23570] tipc: Enabling of bearer rejected, failed to enable media [ 641.677910][T23568] loop0: detected capacity change from 0 to 8192 [ 641.839152][T23585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6280'. [ 642.088838][T23596] loop9: detected capacity change from 0 to 512 [ 642.116068][T23592] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6282'. [ 642.237045][T23596] lo speed is unknown, defaulting to 1000 [ 642.251322][T23600] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6285'. [ 642.258373][T23596] lo speed is unknown, defaulting to 1000 [ 642.616802][T23617] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6293'. [ 642.646064][T23620] loop1: detected capacity change from 0 to 164 [ 642.677220][T23620] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 642.702352][T23620] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 643.663498][T23624] tipc: Enabling of bearer rejected, failed to enable media [ 643.709982][T23638] loop9: detected capacity change from 0 to 8192 [ 643.821450][T23638] loop9: detected capacity change from 0 to 1024 [ 643.856401][T23638] EXT4-fs: inline encryption not supported [ 643.970394][T23638] EXT4-fs: Ignoring removed bh option [ 644.079837][T23649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6306'. [ 644.436573][T23658] loop7: detected capacity change from 0 to 164 [ 644.482575][T23658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 644.524568][T23655] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6307'. [ 644.571470][T23658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 644.691207][T23666] netlink: 'syz.1.6310': attribute type 10 has an invalid length. [ 644.721267][T23666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.732647][T23666] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 644.840744][T23666] loop1: detected capacity change from 0 to 1024 [ 644.859559][T23666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.893683][T23666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 644.911551][T23666] System zones: 0-1, 3-36 [ 644.922533][T23666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.029094][T23666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6310'. [ 645.192092][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.339945][T23688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6317'. [ 645.569693][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 645.569742][ T29] audit: type=1400 audit(672.753:114065): avc: denied { prog_load } for pid=23686 comm="syz.7.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 645.596777][ T29] audit: type=1400 audit(672.753:114066): avc: denied { bpf } for pid=23686 comm="syz.7.6318" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 645.617496][ T29] audit: type=1400 audit(672.753:114067): avc: denied { perfmon } for pid=23686 comm="syz.7.6318" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 645.639140][ T29] audit: type=1400 audit(672.753:114068): avc: denied { prog_run } for pid=23686 comm="syz.7.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 645.659494][ T29] audit: type=1400 audit(672.764:114069): avc: denied { allowed } for pid=23686 comm="syz.7.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 645.678945][ T29] audit: type=1400 audit(672.764:114070): avc: denied { create } for pid=23686 comm="syz.7.6318" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.700796][ T29] audit: type=1400 audit(672.764:114071): avc: denied { map } for pid=23686 comm="syz.7.6318" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.725893][ T29] audit: type=1400 audit(672.764:114072): avc: denied { read write } for pid=23686 comm="syz.7.6318" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.751052][ T29] audit: type=1400 audit(672.764:114073): avc: denied { create } for pid=23686 comm="syz.7.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 645.770771][ T29] audit: type=1400 audit(672.764:114074): avc: denied { create } for pid=23686 comm="syz.7.6318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 646.391511][T23694] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6320'. [ 646.510363][T23700] loop9: detected capacity change from 0 to 164 [ 646.538451][T23700] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 646.567694][T23700] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 647.215577][T23718] tipc: Enabling of bearer rejected, failed to enable media [ 647.292479][T23722] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6331'. [ 647.484762][T23734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6337'. [ 647.759971][T23749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23749 comm=syz.7.6343 [ 647.872525][T23753] tipc: Enabling of bearer rejected, failed to enable media [ 648.062947][T23769] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6352'. [ 648.313717][T23777] loop7: detected capacity change from 0 to 8192 [ 648.398195][T23776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6355'. [ 648.443598][T23787] tipc: Enabling of bearer rejected, failed to enable media [ 648.508247][T23786] tipc: Enabling of bearer rejected, failed to enable media [ 648.961211][T23805] netlink: 'syz.9.6367': attribute type 10 has an invalid length. [ 649.075839][T23805] loop9: detected capacity change from 0 to 1024 [ 649.091464][T23812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6370'. [ 649.112529][T23805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 649.295153][T23817] tipc: Enabling of bearer rejected, failed to enable media [ 649.412892][T23812] 9pnet_fd: Insufficient options for proto=fd [ 649.896174][T23846] loop9: detected capacity change from 0 to 8192 [ 649.935085][T23846] loop9: detected capacity change from 0 to 1024 [ 649.949491][T23846] EXT4-fs: inline encryption not supported [ 649.967722][T23846] EXT4-fs: Ignoring removed bh option [ 650.016339][T23848] netlink: 'syz.0.6383': attribute type 10 has an invalid length. [ 650.059737][T23848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.153970][T23848] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 650.163564][T23853] tipc: Enabling of bearer rejected, failed to enable media [ 650.233769][T23852] loop0: detected capacity change from 0 to 1024 [ 650.292472][T23852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 650.313903][T23852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 650.334121][T23852] System zones: 0-1, 3-36 [ 650.346229][ T29] kauditd_printk_skb: 1210 callbacks suppressed [ 650.346248][ T29] audit: type=1400 audit(677.797:115285): avc: denied { create } for pid=23854 comm="syz.7.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 650.382449][T23852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.403348][ T29] audit: type=1400 audit(677.808:115286): avc: denied { mounton } for pid=23854 comm="syz.7.6384" path="/120/file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 650.426113][ T29] audit: type=1400 audit(677.808:115287): avc: denied { mount } for pid=23854 comm="syz.7.6384" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 650.448545][ T29] audit: type=1400 audit(677.808:115288): avc: denied { unmount } for pid=23854 comm="syz.7.6384" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 650.470476][ T29] audit: type=1400 audit(677.934:115289): avc: denied { mount } for pid=23847 comm="syz.0.6383" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 650.492996][ T29] audit: type=1326 audit(677.934:115290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23847 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1677fcd550 code=0x7ffc0000 [ 650.516605][ T29] audit: type=1326 audit(677.934:115291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23847 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f1677fcd937 code=0x7ffc0000 [ 650.539893][ T29] audit: type=1326 audit(677.934:115292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23847 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1677fcd550 code=0x7ffc0000 [ 650.563920][ T29] audit: type=1400 audit(677.934:115293): avc: denied { read write } for pid=23847 comm="syz.0.6383" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 650.588249][ T29] audit: type=1400 audit(677.934:115294): avc: denied { open } for pid=23847 comm="syz.0.6383" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 650.771527][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.791603][T23860] tipc: Enabling of bearer rejected, failed to enable media [ 651.193470][T23884] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6394'. [ 651.227460][T23890] netlink: 'syz.1.6398': attribute type 10 has an invalid length. [ 651.258578][T23887] loop9: detected capacity change from 0 to 8192 [ 651.303392][T23887] loop9: detected capacity change from 0 to 1024 [ 651.317074][T23887] EXT4-fs: inline encryption not supported [ 651.328360][T23890] loop1: detected capacity change from 0 to 1024 [ 651.336520][T23887] EXT4-fs: Ignoring removed bh option [ 651.344177][T23893] tipc: Enabling of bearer rejected, failed to enable media [ 651.346922][T23890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 651.381173][T23890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 651.401233][T23890] System zones: 0-1, 3-36 [ 651.406904][T23890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.447704][T23905] tipc: Enabling of bearer rejected, failed to enable media [ 651.599714][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.884040][T23920] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6410'. [ 652.145134][T23929] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6422'. [ 652.561104][T23945] netlink: 'syz.1.6418': attribute type 10 has an invalid length. [ 652.667555][T23945] loop1: detected capacity change from 0 to 1024 [ 652.710760][T23945] EXT4-fs: Ignoring removed nomblk_io_submit option [ 652.750732][T23945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 652.772492][T23945] System zones: 0-1, 3-36 [ 652.789633][T23945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.853634][T23953] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6421'. [ 652.869165][T23945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6418'. [ 653.020984][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.141257][T23960] netlink: 'syz.1.6424': attribute type 1 has an invalid length. [ 653.193315][T23962] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6428'. [ 653.202096][T23960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.214897][T23966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6424'. [ 653.240110][T23966] bond1 (unregistering): Released all slaves [ 653.284267][T23960] loop1: detected capacity change from 0 to 512 [ 653.315197][T23960] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6424: corrupted inode contents [ 653.329491][T23964] loop9: detected capacity change from 0 to 8192 [ 653.358965][T23960] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.6424: mark_inode_dirty error [ 653.390973][T23960] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.6424: corrupted inode contents [ 653.411516][T23964] loop9: detected capacity change from 0 to 1024 [ 653.424579][T23960] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.6424: mark_inode_dirty error [ 653.439550][T23964] EXT4-fs: inline encryption not supported [ 653.445831][T23964] EXT4-fs: Ignoring removed bh option [ 653.452113][T23960] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.6424: Failed to acquire dquot type 0 [ 653.479529][T23960] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6424: corrupted inode contents [ 653.513731][T23960] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6424: mark_inode_dirty error [ 653.524677][T23977] tipc: Enabling of bearer rejected, failed to enable media [ 653.539729][T23960] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6424: corrupted inode contents [ 653.569597][T23960] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6424: mark_inode_dirty error [ 653.598143][T23960] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6424: corrupted inode contents [ 653.621335][T23960] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 653.651732][T23960] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6424: corrupted inode contents [ 653.680952][T23960] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6424: mark_inode_dirty error [ 653.713349][T23960] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 653.727363][T23984] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6434'. [ 653.747578][T23960] EXT4-fs (loop1): 1 truncate cleaned up [ 653.757237][T23960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.812421][T23986] netlink: 'syz.6.6435': attribute type 10 has an invalid length. [ 653.899297][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.102849][T23995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6439'. [ 654.102985][T23986] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6435'. [ 654.387331][T24008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6444'. [ 654.499430][T24015] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.571181][T24015] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.647237][T24015] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.738869][T24015] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.850867][ T4622] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.873325][T24026] loop0: detected capacity change from 0 to 8192 [ 654.889323][ T4622] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.900174][ T4622] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.914722][ T4622] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.063236][T24042] tipc: Enabling of bearer rejected, failed to enable media [ 655.083213][T24043] tipc: Enabling of bearer rejected, failed to enable media [ 655.112178][ T29] kauditd_printk_skb: 1460 callbacks suppressed [ 655.112239][ T29] audit: type=1400 audit(682.799:116753): avc: denied { ioctl } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 655.143954][ T29] audit: type=1400 audit(682.799:116754): avc: denied { write } for pid=24024 comm="syz.0.6451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 655.164828][ T29] audit: type=1400 audit(682.799:116755): avc: denied { read } for pid=24024 comm="syz.0.6451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 655.416902][ T29] audit: type=1400 audit(682.883:116756): avc: denied { read write } for pid=21002 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.441316][ T29] audit: type=1400 audit(682.883:116757): avc: denied { open } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.465970][ T29] audit: type=1400 audit(682.883:116758): avc: denied { ioctl } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.491955][ T29] audit: type=1400 audit(682.915:116759): avc: denied { map_create } for pid=24047 comm="syz.1.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.511810][ T29] audit: type=1400 audit(682.915:116760): avc: denied { bpf } for pid=24047 comm="syz.1.6460" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 655.532642][ T29] audit: type=1400 audit(682.915:116761): avc: denied { map_read map_write } for pid=24047 comm="syz.1.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.553666][ T29] audit: type=1400 audit(682.936:116762): avc: denied { map_create } for pid=24048 comm="syz.9.6461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 655.670119][T24063] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6467'. [ 655.834200][T24071] tipc: Enabling of bearer rejected, failed to enable media [ 656.223513][T24095] loop1: detected capacity change from 0 to 8192 [ 656.361621][T24108] tipc: Enabling of bearer rejected, failed to enable media [ 656.636803][T24112] tipc: Enabling of bearer rejected, failed to enable media [ 657.097105][T24134] __nla_validate_parse: 2 callbacks suppressed [ 657.097122][T24134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6494'. [ 657.136618][T24128] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6492'. [ 657.218198][T24149] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6500'. [ 657.288636][T24144] tipc: Enabling of bearer rejected, failed to enable media [ 657.448589][T24162] tipc: Enabling of bearer rejected, failed to enable media [ 657.732826][T24171] xt_limit: Overflow, try lower: 271964/0 [ 657.977302][T24175] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6510'. [ 658.093165][T24178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6511'. [ 658.168298][T24183] sctp: [Deprecated]: syz.9.6513 (pid 24183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.168298][T24183] Use struct sctp_sack_info instead [ 658.310413][ T6992] lo speed is unknown, defaulting to 1000 [ 658.615776][T24213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6524'. [ 658.700493][T24212] loop9: detected capacity change from 0 to 8192 [ 658.756910][T24212] loop9: detected capacity change from 0 to 1024 [ 658.769842][T24212] EXT4-fs: inline encryption not supported [ 658.777321][T24227] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6531'. [ 658.787135][T24212] EXT4-fs: Ignoring removed bh option [ 658.828696][T24212] tipc: Enabling of bearer rejected, failed to enable media [ 659.165524][T24246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6540'. [ 659.603553][T24266] loop0: detected capacity change from 0 to 512 [ 659.713529][T24269] tipc: Enabling of bearer rejected, failed to enable media [ 659.915261][ T29] kauditd_printk_skb: 1816 callbacks suppressed [ 659.915284][ T29] audit: type=1400 audit(687.848:118574): avc: denied { read write } for pid=24272 comm="syz.1.6551" name="loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 659.945566][ T29] audit: type=1400 audit(687.848:118575): avc: denied { read write open } for pid=24272 comm="syz.1.6551" path="/dev/loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 659.978672][T24273] loop1: detected capacity change from 0 to 8192 [ 660.064832][ T29] audit: type=1400 audit(687.901:118576): avc: denied { ioctl } for pid=24272 comm="syz.1.6551" path="/dev/loop1" dev="devtmpfs" ino=842 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 660.089627][ T29] audit: type=1400 audit(687.922:118577): avc: denied { mounton } for pid=24272 comm="syz.1.6551" path="/189/bus" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 660.112627][ T29] audit: type=1400 audit(687.922:118578): avc: denied { read write } for pid=21002 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.137028][ T29] audit: type=1400 audit(687.922:118579): avc: denied { open } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.161654][ T29] audit: type=1400 audit(687.922:118580): avc: denied { ioctl } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 660.187817][ T29] audit: type=1400 audit(687.943:118581): avc: denied { mount } for pid=24272 comm="syz.1.6551" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 660.210433][ T29] audit: type=1400 audit(687.943:118582): avc: denied { read write } for pid=24272 comm="syz.1.6551" name="loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 660.234141][ T29] audit: type=1400 audit(687.943:118583): avc: denied { open } for pid=24272 comm="syz.1.6551" path="/dev/loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 660.310273][T24281] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6554'. [ 660.469537][T24287] tipc: Enabling of bearer rejected, failed to enable media [ 660.743345][T24297] loop0: detected capacity change from 0 to 512 [ 660.825200][T24299] loop7: detected capacity change from 0 to 8192 [ 660.840163][T24301] tipc: Enabling of bearer rejected, failed to enable media [ 661.020398][T24308] tipc: Enabling of bearer rejected, failed to enable media [ 661.154805][T24311] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6562'. [ 661.589297][T24330] loop9: detected capacity change from 0 to 512 [ 661.740583][T24339] loop7: detected capacity change from 0 to 512 [ 661.752492][T24330] lo speed is unknown, defaulting to 1000 [ 661.779948][T24330] lo speed is unknown, defaulting to 1000 [ 661.863106][T24338] tipc: Enabling of bearer rejected, failed to enable media [ 662.073826][T24346] __nla_validate_parse: 1 callbacks suppressed [ 662.073847][T24346] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6577'. [ 662.114188][T24351] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6579'. [ 662.263224][T24348] loop0: detected capacity change from 0 to 8192 [ 662.435258][T24364] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.510346][T24356] syzkaller0: entered promiscuous mode [ 662.516127][T24356] syzkaller0: entered allmulticast mode [ 662.533584][T24364] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.612575][T24364] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.709017][T24364] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.793584][ T51] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.826166][ T51] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.856253][T24372] loop9: detected capacity change from 0 to 164 [ 662.878943][ T51] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.897085][T24372] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 662.916809][ T51] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.925860][T24374] netlink: 'syz.1.6588': attribute type 10 has an invalid length. [ 662.967925][T24372] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 663.016560][T24374] loop1: detected capacity change from 0 to 1024 [ 663.034802][T24374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 663.067760][T24374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 663.086791][T24374] System zones: 0-1, 3-36 [ 663.087839][T24380] tipc: Enabling of bearer rejected, failed to enable media [ 663.111439][T24374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.168103][T24377] tipc: Enabling of bearer rejected, failed to enable media [ 663.214490][T24374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6588'. [ 663.330364][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.385499][T24389] loop9: detected capacity change from 0 to 8192 [ 663.503694][T24393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6592'. [ 663.552174][T24389] loop9: detected capacity change from 0 to 1024 [ 663.568798][T24389] EXT4-fs: inline encryption not supported [ 663.593324][T24389] EXT4-fs: Ignoring removed bh option [ 663.785795][T24408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.889186][T24408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.969678][T24413] netlink: 'syz.6.6598': attribute type 10 has an invalid length. [ 664.001065][T24408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.087072][T24413] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6598'. [ 664.134153][T24408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.253093][T19656] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.288084][T19656] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.306855][T19656] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.332361][T19656] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.441531][T24426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6606'. [ 664.502427][T24428] loop9: detected capacity change from 0 to 8192 [ 664.535913][T24425] tipc: Enabling of bearer rejected, failed to enable media [ 664.546779][T24428] loop9: detected capacity change from 0 to 1024 [ 664.561946][T24428] EXT4-fs: inline encryption not supported [ 664.571389][T24428] EXT4-fs: Ignoring removed bh option [ 664.589311][T24428] tipc: Enabling of bearer rejected, failed to enable media [ 664.687329][ T29] kauditd_printk_skb: 949 callbacks suppressed [ 664.687350][ T29] audit: type=1400 audit(692.854:119533): avc: denied { read write } for pid=24435 comm="syz.0.6610" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.717746][ T29] audit: type=1400 audit(692.854:119534): avc: denied { open } for pid=24435 comm="syz.0.6610" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.752047][T24437] loop0: detected capacity change from 0 to 512 [ 664.760958][T24440] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6609'. [ 664.871790][ T29] audit: type=1400 audit(692.927:119535): avc: denied { ioctl } for pid=24435 comm="syz.0.6610" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 664.898487][ T29] audit: type=1400 audit(692.927:119536): avc: denied { create } for pid=24432 comm="syz.1.6609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 664.920164][ T29] audit: type=1400 audit(692.927:119537): avc: denied { write } for pid=24432 comm="syz.1.6609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 664.941634][ T29] audit: type=1400 audit(692.927:119538): avc: denied { read } for pid=24432 comm="syz.1.6609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 664.962431][ T29] audit: type=1400 audit(692.927:119539): avc: denied { mounton } for pid=24435 comm="syz.0.6610" path="/237/file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 664.985727][ T29] audit: type=1400 audit(692.927:119540): avc: denied { write } for pid=24432 comm="syz.1.6609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 665.006710][ T29] audit: type=1400 audit(692.969:119541): avc: denied { create } for pid=24441 comm="syz.6.6612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 665.026501][ T29] audit: type=1400 audit(692.969:119542): avc: denied { prog_load } for pid=24441 comm="syz.6.6612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 665.031904][T24444] netlink: 'syz.7.6613': attribute type 10 has an invalid length. [ 665.114485][T24448] loop0: detected capacity change from 0 to 512 [ 665.180947][T24444] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6613'. [ 665.519808][T24458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6619'. [ 665.669989][T24476] loop1: detected capacity change from 0 to 164 [ 665.681867][T24476] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 665.708657][T24476] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 665.778565][T24485] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6633'. [ 665.784823][T24486] loop0: detected capacity change from 0 to 164 [ 665.830594][T24486] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 665.896933][T24486] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 665.989837][T24498] loop9: detected capacity change from 0 to 512 [ 666.066709][T24507] loop0: detected capacity change from 0 to 2048 [ 666.089759][T24507] EXT4-fs: inline encryption not supported [ 666.097371][T24504] loop7: detected capacity change from 0 to 8192 [ 666.144609][T24507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.172879][T24507] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.6641: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 666.262940][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.317258][T24531] netlink: 'syz.1.6651': attribute type 178 has an invalid length. [ 666.707083][T24549] tipc: Enabling of bearer rejected, failed to enable media [ 666.935801][T24561] loop1: detected capacity change from 0 to 2048 [ 666.953978][T24561] EXT4-fs: inline encryption not supported [ 666.974046][T24561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.990054][T24561] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.6661: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 667.020442][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.087240][T24575] __nla_validate_parse: 3 callbacks suppressed [ 667.087260][T24575] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6664'. [ 667.087924][T24574] netlink: 'syz.6.6666': attribute type 10 has an invalid length. [ 667.121968][T24574] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6666'. [ 667.173821][T24572] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6665'. [ 667.306808][T24588] netlink: 'syz.9.6672': attribute type 10 has an invalid length. [ 667.334546][T24588] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6672'. [ 667.398862][T24598] loop9: detected capacity change from 0 to 2048 [ 667.406987][T24598] EXT4-fs: inline encryption not supported [ 667.479873][T24605] netlink: 'syz.9.6679': attribute type 10 has an invalid length. [ 667.498675][T24605] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6679'. [ 667.599430][T24609] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6681'. [ 667.631778][T24616] netlink: 'syz.9.6684': attribute type 1 has an invalid length. [ 667.650120][T24616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.662915][T24616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6684'. [ 667.675376][T24616] bond1 (unregistering): Released all slaves [ 667.732064][T24616] loop9: detected capacity change from 0 to 512 [ 667.873796][T24628] netlink: 'syz.7.6689': attribute type 10 has an invalid length. [ 667.907306][T24628] loop7: detected capacity change from 0 to 1024 [ 667.917673][T24628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 667.927682][T24628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 667.945962][T24628] System zones: 0-1, 3-36 [ 667.954858][T24628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.023175][T24628] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6689'. [ 668.111131][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.146972][T24637] loop1: detected capacity change from 0 to 8192 [ 668.178641][T24639] netlink: 'syz.7.6692': attribute type 10 has an invalid length. [ 668.241678][T24639] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6692'. [ 668.346984][T24648] tipc: Enabling of bearer rejected, failed to enable media [ 668.437881][T24654] netlink: 'syz.0.6698': attribute type 1 has an invalid length. [ 668.455166][T24654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.466210][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6698'. [ 668.484669][T24654] bond1 (unregistering): Released all slaves [ 668.574920][T24659] loop0: detected capacity change from 0 to 512 [ 668.602767][T24659] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6698: corrupted inode contents [ 668.619227][T24659] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.6698: mark_inode_dirty error [ 668.633029][T24659] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6698: corrupted inode contents [ 668.645611][T24659] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.6698: mark_inode_dirty error [ 668.658490][T24659] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6698: Failed to acquire dquot type 0 [ 668.672971][T24659] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6698: corrupted inode contents [ 668.698658][T24659] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6698: mark_inode_dirty error [ 668.711150][T24659] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6698: corrupted inode contents [ 668.727626][T24659] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6698: mark_inode_dirty error [ 668.742704][T24659] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6698: corrupted inode contents [ 668.776642][T24659] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 668.857796][T24659] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6698: corrupted inode contents [ 668.894157][T24659] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6698: mark_inode_dirty error [ 668.907806][ T3417] kernel write not supported for file bpf-prog (pid: 3417 comm: kworker/0:4) [ 668.918452][T24659] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 668.940761][T24659] EXT4-fs (loop0): 1 truncate cleaned up [ 668.948059][T24659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.995540][T24680] netlink: 'syz.9.6706': attribute type 10 has an invalid length. [ 669.066951][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.091573][T24682] loop7: detected capacity change from 0 to 512 [ 669.110122][T24682] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 669.212522][T24682] EXT4-fs (loop7): failed to open journal device unknown-block(11,131) -6 [ 669.325046][T24706] loop7: detected capacity change from 0 to 2048 [ 669.332930][T24706] EXT4-fs: inline encryption not supported [ 669.344563][T24706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.389414][T24706] EXT4-fs error (device loop7): ext4_ext_precache:632: inode #2: comm syz.7.6716: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 669.451000][T24714] netlink: 'syz.0.6717': attribute type 1 has an invalid length. [ 669.464508][ T29] kauditd_printk_skb: 2802 callbacks suppressed [ 669.464529][ T29] audit: type=1400 audit(697.868:122341): avc: denied { unmount } for pid=22182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 669.493523][T24717] loop1: detected capacity change from 0 to 8192 [ 669.503039][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.516889][ T29] audit: type=1400 audit(697.900:122342): avc: denied { read write } for pid=24716 comm="syz.1.6719" name="loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 669.519098][T24714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.540714][ T29] audit: type=1400 audit(697.900:122343): avc: denied { open } for pid=24716 comm="syz.1.6719" path="/dev/loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 669.571078][ T29] audit: type=1400 audit(697.900:122344): avc: denied { ioctl } for pid=24716 comm="syz.1.6719" path="/dev/loop1" dev="devtmpfs" ino=842 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 669.596567][ T29] audit: type=1400 audit(697.900:122345): avc: denied { prog_load } for pid=24718 comm="syz.6.6720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 669.616341][ T29] audit: type=1400 audit(697.900:122346): avc: denied { bpf } for pid=24718 comm="syz.6.6720" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 669.637523][ T29] audit: type=1400 audit(697.900:122347): avc: denied { perfmon } for pid=24718 comm="syz.6.6720" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 669.658874][ T29] audit: type=1400 audit(697.900:122348): avc: denied { map_create } for pid=24718 comm="syz.6.6720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 669.666496][T24714] loop0: detected capacity change from 0 to 512 [ 669.678409][ T29] audit: type=1400 audit(697.910:122349): avc: denied { read } for pid=24718 comm="syz.6.6720" dev="nsfs" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 669.678439][ T29] audit: type=1400 audit(697.910:122350): avc: denied { open } for pid=24718 comm="syz.6.6720" path="net:[4026533379]" dev="nsfs" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 669.743202][T24714] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6717: corrupted inode contents [ 669.764703][T24714] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.6717: mark_inode_dirty error [ 669.778325][T24714] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6717: corrupted inode contents [ 669.791343][T24714] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.6717: mark_inode_dirty error [ 669.813044][T24714] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6717: Failed to acquire dquot type 0 [ 669.829642][T24714] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6717: corrupted inode contents [ 669.848486][T24714] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6717: mark_inode_dirty error [ 669.874392][T24714] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6717: corrupted inode contents [ 669.887411][T24714] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6717: mark_inode_dirty error [ 669.903608][T24714] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6717: corrupted inode contents [ 669.918171][T24714] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 669.933421][T24714] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6717: corrupted inode contents [ 669.952298][T24714] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6717: mark_inode_dirty error [ 669.963930][T24714] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 669.974168][T24714] EXT4-fs (loop0): 1 truncate cleaned up [ 669.980727][T24714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.036698][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.208469][T24760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.227836][T24760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.020801][T24811] loop7: detected capacity change from 0 to 164 [ 671.041423][T24811] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.081632][T24811] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.220493][T24817] loop7: detected capacity change from 0 to 512 [ 671.230690][T24817] EXT4-fs (loop7): filesystem is read-only [ 671.236811][T24817] EXT4-fs (loop7): invalid inodes per group: 3 [ 671.236811][T24817] [ 671.264734][T24823] loop0: detected capacity change from 0 to 164 [ 671.287763][T24823] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.334053][T24823] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.439054][T24834] netlink: 'syz.9.6762': attribute type 1 has an invalid length. [ 671.465686][T24834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.493825][T24834] bond1 (unregistering): Released all slaves [ 671.539616][T24846] loop1: detected capacity change from 0 to 512 [ 671.551769][T24847] loop9: detected capacity change from 0 to 512 [ 671.562384][T24846] EXT4-fs: dax option not supported [ 671.606706][T24854] loop0: detected capacity change from 0 to 512 [ 671.616563][T24853] loop7: detected capacity change from 0 to 164 [ 671.626926][T24853] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.643264][T24854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.670164][T24853] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 671.753474][T24864] netlink: 'syz.6.6772': attribute type 10 has an invalid length. [ 671.908892][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.967471][T24883] netlink: 'syz.6.6780': attribute type 1 has an invalid length. [ 671.983341][T24883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.996553][T24883] __nla_validate_parse: 7 callbacks suppressed [ 671.996567][T24883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6780'. [ 672.018090][T24883] bond2 (unregistering): Released all slaves [ 672.054780][T24888] loop0: detected capacity change from 0 to 164 [ 672.063444][T24888] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.084078][T24888] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.151980][T24896] loop0: detected capacity change from 0 to 164 [ 672.160757][T24896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.177330][T24896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.248672][T24895] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6784'. [ 672.261647][T24901] netlink: 'syz.0.6787': attribute type 10 has an invalid length. [ 672.293442][T24901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6787'. [ 672.417060][T24911] loop0: detected capacity change from 0 to 8192 [ 672.486313][ T6995] kernel write not supported for file bpf-prog (pid: 6995 comm: kworker/1:9) [ 672.512164][T24918] loop1: detected capacity change from 0 to 164 [ 672.532985][T24918] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.550723][T24918] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.588705][T24923] loop7: detected capacity change from 0 to 164 [ 672.621854][T24923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.625056][T24925] tipc: Enabling of bearer rejected, failed to enable media [ 672.666770][T24923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.755385][T24933] loop1: detected capacity change from 0 to 164 [ 672.778838][T24933] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.823136][T24933] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 672.890319][T24934] loop9: detected capacity change from 0 to 512 [ 672.998865][T24943] netlink: 'syz.9.6802': attribute type 10 has an invalid length. [ 673.019553][T24943] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6802'. [ 673.041051][T24944] tipc: Enabling of bearer rejected, failed to enable media [ 673.129786][T24948] loop1: detected capacity change from 0 to 512 [ 673.150744][T24948] EXT4-fs: Ignoring removed oldalloc option [ 673.194412][T24948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.298311][T24948] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6804: bg 0: block 217: padding at end of block bitmap is not set [ 673.384215][T24948] EXT4-fs (loop1): Remounting filesystem read-only [ 673.411797][ T6758] kernel write not supported for file bpf-prog (pid: 6758 comm: kworker/0:5) [ 673.445533][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.486884][T24960] loop7: detected capacity change from 0 to 164 [ 673.506994][T24960] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 673.540378][T24960] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 673.639778][T24972] netlink: 'syz.0.6816': attribute type 10 has an invalid length. [ 673.661750][T24972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6816'. [ 673.717868][T24976] loop7: detected capacity change from 0 to 512 [ 673.803433][T24977] loop1: detected capacity change from 0 to 512 [ 673.827556][T24977] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 673.894123][T24977] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 673.942028][T24989] loop7: detected capacity change from 0 to 164 [ 673.970944][T24986] loop0: detected capacity change from 0 to 8192 [ 673.980729][T24989] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 674.012916][T24989] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 674.204786][T25007] loop9: detected capacity change from 0 to 512 [ 674.229420][T25009] netlink: 'syz.7.6831': attribute type 10 has an invalid length. [ 674.237896][ T29] kauditd_printk_skb: 1645 callbacks suppressed [ 674.237915][ T29] audit: type=1400 audit(702.871:123992): avc: denied { mounton } for pid=25004 comm="syz.9.6830" path="/291/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 674.267843][ T29] audit: type=1400 audit(702.871:123993): avc: denied { read write } for pid=25004 comm="syz.9.6830" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.282139][T25014] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6831'. [ 674.292228][ T29] audit: type=1400 audit(702.871:123994): avc: denied { open } for pid=25004 comm="syz.9.6830" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.327009][ T29] audit: type=1400 audit(702.871:123995): avc: denied { ioctl } for pid=25004 comm="syz.9.6830" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.353611][ T29] audit: type=1400 audit(702.902:123996): avc: denied { read write } for pid=21002 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.377125][T25011] tipc: Enabling of bearer rejected, failed to enable media [ 674.380346][ T29] audit: type=1400 audit(702.902:123997): avc: denied { open } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.397883][T25017] audit: audit_backlog=65 > audit_backlog_limit=64 [ 674.414111][ T29] audit: type=1400 audit(702.902:123998): avc: denied { ioctl } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 674.414151][ T29] audit: type=1326 audit(702.923:123999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25006 comm="syz.7.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1378ebe9 code=0x7ffc0000 [ 674.420876][T25017] audit: audit_lost=257 audit_rate_limit=0 audit_backlog_limit=64 [ 674.549835][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6835'. [ 674.580653][T25025] loop7: detected capacity change from 0 to 164 [ 674.642279][T25025] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 674.674730][T25025] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 674.889761][T25042] loop7: detected capacity change from 0 to 512 [ 674.901872][T25042] EXT4-fs (loop7): filesystem is read-only [ 674.908099][T25042] EXT4-fs (loop7): invalid inodes per group: 3 [ 674.908099][T25042] [ 675.440483][T25056] netlink: 'syz.6.6848': attribute type 10 has an invalid length. [ 675.462046][T25056] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6848'. [ 675.512247][T25058] netlink: 'syz.0.6849': attribute type 21 has an invalid length. [ 675.565258][T25058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6849'. [ 675.709604][T25066] loop9: detected capacity change from 0 to 1024 [ 675.725861][T25067] hub 6-0:1.0: USB hub found [ 675.733617][T25066] EXT4-fs: inline encryption not supported [ 675.739795][T25066] EXT4-fs: Ignoring removed i_version option [ 675.748237][T25067] hub 6-0:1.0: 8 ports detected [ 676.109053][T25085] netlink: 'syz.9.6861': attribute type 10 has an invalid length. [ 676.140185][T25085] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6861'. [ 676.338454][T25091] loop9: detected capacity change from 0 to 512 [ 676.441896][T25094] loop0: detected capacity change from 0 to 512 [ 676.500300][T25098] loop9: detected capacity change from 0 to 2048 [ 676.548232][T25098] EXT4-fs: inline encryption not supported [ 676.885084][T25119] loop1: detected capacity change from 0 to 512 [ 676.892133][T25106] loop9: detected capacity change from 0 to 8192 [ 676.903569][T25119] EXT4-fs (loop1): filesystem is read-only [ 676.909565][T25119] EXT4-fs (loop1): invalid inodes per group: 3 [ 676.909565][T25119] [ 676.982677][T25106] loop9: detected capacity change from 0 to 1024 [ 677.014406][T25106] EXT4-fs: inline encryption not supported [ 677.035325][T25106] EXT4-fs: Ignoring removed bh option [ 677.100958][T25115] syzkaller0: entered promiscuous mode [ 677.106997][T25115] syzkaller0: entered allmulticast mode [ 677.136743][T25134] FAULT_INJECTION: forcing a failure. [ 677.136743][T25134] name failslab, interval 1, probability 0, space 0, times 0 [ 677.150187][T25134] CPU: 0 UID: 0 PID: 25134 Comm: syz.1.6882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 677.150221][T25134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.150283][T25134] Call Trace: [ 677.150289][T25134] [ 677.150297][T25134] __dump_stack+0x1d/0x30 [ 677.150322][T25134] dump_stack_lvl+0xe8/0x140 [ 677.150345][T25134] dump_stack+0x15/0x1b [ 677.150365][T25134] should_fail_ex+0x265/0x280 [ 677.150403][T25134] should_failslab+0x8c/0xb0 [ 677.150427][T25134] kmem_cache_alloc_noprof+0x50/0x310 [ 677.150451][T25134] ? security_inode_alloc+0x37/0x100 [ 677.150498][T25134] security_inode_alloc+0x37/0x100 [ 677.150530][T25134] inode_init_always_gfp+0x4b7/0x500 [ 677.150559][T25134] ? __pfx_bpf_fill_super+0x10/0x10 [ 677.150641][T25134] alloc_inode+0x58/0x170 [ 677.150660][T25134] new_inode+0x1d/0xe0 [ 677.150709][T25134] ? __pfx_bpf_fill_super+0x10/0x10 [ 677.150734][T25134] simple_fill_super+0x7c/0x330 [ 677.150753][T25134] ? __pfx_bpf_fill_super+0x10/0x10 [ 677.150831][T25134] bpf_fill_super+0x85/0x5c0 [ 677.150860][T25134] ? shrinker_register+0x106/0x130 [ 677.150888][T25134] ? sget_fc+0x68a/0x6e0 [ 677.150916][T25134] ? __pfx_set_anon_super_fc+0x10/0x10 [ 677.150942][T25134] ? __pfx_bpf_fill_super+0x10/0x10 [ 677.151050][T25134] get_tree_nodev+0x80/0x100 [ 677.151133][T25134] bpf_get_tree+0x1c/0x30 [ 677.151292][T25134] vfs_get_tree+0x54/0x1d0 [ 677.151315][T25134] vfs_cmd_create+0x8a/0x140 [ 677.151395][T25134] vfs_fsconfig_locked+0x6f/0x210 [ 677.151423][T25134] __se_sys_fsconfig+0x648/0x770 [ 677.151475][T25134] __x64_sys_fsconfig+0x67/0x80 [ 677.151501][T25134] x64_sys_call+0x1f83/0x2ff0 [ 677.151540][T25134] do_syscall_64+0xd2/0x200 [ 677.151601][T25134] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 677.151625][T25134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.151645][T25134] RIP: 0033:0x7f8d76e1ebe9 [ 677.151695][T25134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.151716][T25134] RSP: 002b:00007f8d7587f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 677.151738][T25134] RAX: ffffffffffffffda RBX: 00007f8d77045fa0 RCX: 00007f8d76e1ebe9 [ 677.151750][T25134] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 677.151762][T25134] RBP: 00007f8d7587f090 R08: 0000000000000000 R09: 0000000000000000 [ 677.151773][T25134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.151832][T25134] R13: 00007f8d77046038 R14: 00007f8d77045fa0 R15: 00007ffe937dd838 [ 677.151854][T25134] [ 677.518514][T25107] tipc: Enabling of bearer rejected, failed to enable media [ 677.669456][T25144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6885'. [ 678.777729][T25175] loop7: detected capacity change from 0 to 164 [ 678.977129][T25179] syzkaller0: entered promiscuous mode [ 678.983117][T25179] syzkaller0: entered allmulticast mode [ 679.214032][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 679.214050][ T29] audit: type=1400 audit(708.098:124802): avc: denied { map_create } for pid=25184 comm="syz.6.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 679.240153][ T29] audit: type=1400 audit(708.098:124803): avc: denied { bpf } for pid=25184 comm="syz.6.6898" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 679.277146][T25185] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6898'. [ 679.340200][ T29] audit: type=1400 audit(708.161:124804): avc: denied { map_read map_write } for pid=25184 comm="syz.6.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 679.361095][ T29] audit: type=1400 audit(708.161:124805): avc: denied { prog_load } for pid=25184 comm="syz.6.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 679.380867][ T29] audit: type=1400 audit(708.161:124806): avc: denied { read write } for pid=21002 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.406587][ T29] audit: type=1400 audit(708.161:124807): avc: denied { open } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.431932][ T29] audit: type=1400 audit(708.161:124808): avc: denied { ioctl } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 679.457251][ T29] audit: type=1400 audit(708.161:124809): avc: denied { prog_load } for pid=25184 comm="syz.6.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 679.476821][ T29] audit: type=1400 audit(708.161:124810): avc: denied { bpf } for pid=25184 comm="syz.6.6898" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 679.498640][ T29] audit: type=1400 audit(708.161:124811): avc: denied { perfmon } for pid=25184 comm="syz.6.6898" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 679.587433][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6905'. [ 679.723501][T25202] loop1: detected capacity change from 0 to 128 [ 679.744988][T25202] vfat: Unknown parameter '00000000000000000000014000000000000000000000030000000000000000000000001777777777777777777777' [ 679.826442][T25216] syzkaller0: entered promiscuous mode [ 679.832217][T25216] syzkaller0: entered allmulticast mode [ 679.990816][T25218] loop7: detected capacity change from 0 to 512 [ 679.999165][T25218] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 680.044767][T25218] EXT4-fs (loop7): failed to open journal device unknown-block(11,131) -6 [ 680.118017][T25229] vlan1: entered promiscuous mode [ 680.123332][T25229] bridge0: entered promiscuous mode [ 680.233411][T25244] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6919'. [ 680.251656][T25246] FAULT_INJECTION: forcing a failure. [ 680.251656][T25246] name failslab, interval 1, probability 0, space 0, times 0 [ 680.265159][T25246] CPU: 1 UID: 0 PID: 25246 Comm: syz.0.6920 Not tainted syzkaller #0 PREEMPT(voluntary) [ 680.265189][T25246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 680.265203][T25246] Call Trace: [ 680.265212][T25246] [ 680.265223][T25246] __dump_stack+0x1d/0x30 [ 680.265251][T25246] dump_stack_lvl+0xe8/0x140 [ 680.265272][T25246] dump_stack+0x15/0x1b [ 680.265329][T25246] should_fail_ex+0x265/0x280 [ 680.265367][T25246] should_failslab+0x8c/0xb0 [ 680.265395][T25246] kmem_cache_alloc_noprof+0x50/0x310 [ 680.265475][T25246] ? skb_clone+0x151/0x1f0 [ 680.265502][T25246] skb_clone+0x151/0x1f0 [ 680.265552][T25246] __netlink_deliver_tap+0x2c9/0x500 [ 680.265578][T25246] netlink_unicast+0x66b/0x690 [ 680.265610][T25246] netlink_sendmsg+0x58b/0x6b0 [ 680.265634][T25246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.265720][T25246] __sock_sendmsg+0x145/0x180 [ 680.265821][T25246] ____sys_sendmsg+0x31e/0x4e0 [ 680.265846][T25246] ___sys_sendmsg+0x17b/0x1d0 [ 680.265922][T25246] __x64_sys_sendmsg+0xd4/0x160 [ 680.265953][T25246] x64_sys_call+0x191e/0x2ff0 [ 680.266017][T25246] do_syscall_64+0xd2/0x200 [ 680.266077][T25246] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 680.266231][T25246] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 680.266260][T25246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.266313][T25246] RIP: 0033:0x7f1677fcebe9 [ 680.266330][T25246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.266351][T25246] RSP: 002b:00007f1676a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.266374][T25246] RAX: ffffffffffffffda RBX: 00007f16781f5fa0 RCX: 00007f1677fcebe9 [ 680.266387][T25246] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 680.266405][T25246] RBP: 00007f1676a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 680.266419][T25246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.266434][T25246] R13: 00007f16781f6038 R14: 00007f16781f5fa0 R15: 00007fff6a6a4fb8 [ 680.266455][T25246] [ 680.480192][T25246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6920'. [ 680.489498][T25246] IPVS: Error joining to the multicast group [ 680.553023][T25254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6923'. [ 680.586432][T25253] hub 6-0:1.0: USB hub found [ 680.591522][T25253] hub 6-0:1.0: 8 ports detected [ 680.684224][T25262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6926'. [ 680.700721][T25262] IPVS: Error joining to the multicast group [ 680.797659][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6929'. [ 680.824809][T25267] IPVS: Error joining to the multicast group [ 680.849230][T25271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6931'. [ 681.067564][T25278] loop9: detected capacity change from 0 to 2048 [ 681.076188][T25278] EXT4-fs: inline encryption not supported [ 681.175647][T25258] loop1: detected capacity change from 0 to 512 [ 681.247340][T25258] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 681.250488][T25286] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6937'. [ 681.385008][T25258] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 681.609033][T25302] loop1: detected capacity change from 0 to 1024 [ 681.633846][T25306] loop7: detected capacity change from 0 to 164 [ 681.645591][T25302] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 681.657772][T25302] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 681.658852][T25304] loop9: detected capacity change from 0 to 2048 [ 681.698528][T25302] JBD2: no valid journal superblock found [ 681.701707][T25304] EXT4-fs: inline encryption not supported [ 681.704593][T25302] EXT4-fs (loop1): Could not load journal inode [ 681.809188][T25302] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 681.853307][T25322] loop7: detected capacity change from 0 to 1024 [ 681.855888][T25302] pim6reg: entered allmulticast mode [ 681.868372][T25326] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 681.880315][T25324] IPVS: stopping master sync thread 25326 ... [ 681.921240][T25322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.966402][T25322] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 682.045549][T25338] loop1: detected capacity change from 0 to 2048 [ 682.055719][T25338] EXT4-fs: inline encryption not supported [ 682.055732][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.102499][T25338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.124420][T25338] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #2: comm syz.1.6958: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 682.191348][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.409418][T25371] loop0: detected capacity change from 0 to 128 [ 682.421038][T25370] loop7: detected capacity change from 0 to 1024 [ 682.429995][T25371] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 682.446025][T25373] __nla_validate_parse: 6 callbacks suppressed [ 682.446043][T25373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6971'. [ 682.465700][T25370] EXT4-fs: dax option not supported [ 682.540126][T25377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6969'. [ 682.565092][T25377] vxlan0: entered promiscuous mode [ 682.578346][T19656] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.618373][T19656] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.642155][T20740] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.646734][T19656] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.673410][T19656] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.761091][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 682.769018][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.776667][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.784598][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.792134][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.799893][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.807850][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x4 [ 682.816063][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.824040][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.831601][T22051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 682.839669][T22051] hid-generic 0000:0000:0000.0008: collection stack underflow [ 682.847613][T22051] hid-generic 0000:0000:0000.0008: item 0 0 0 12 parsing failed [ 682.887047][T22051] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 682.900669][T25397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6979'. [ 683.014242][T25394] syzkaller0: entered promiscuous mode [ 683.020060][T25394] syzkaller0: entered allmulticast mode [ 683.122624][T25420] FAULT_INJECTION: forcing a failure. [ 683.122624][T25420] name failslab, interval 1, probability 0, space 0, times 0 [ 683.135866][T25420] CPU: 0 UID: 0 PID: 25420 Comm: syz.9.6986 Not tainted syzkaller #0 PREEMPT(voluntary) [ 683.135978][T25420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.135990][T25420] Call Trace: [ 683.135996][T25420] [ 683.136004][T25420] __dump_stack+0x1d/0x30 [ 683.136027][T25420] dump_stack_lvl+0xe8/0x140 [ 683.136047][T25420] dump_stack+0x15/0x1b [ 683.136078][T25420] should_fail_ex+0x265/0x280 [ 683.136105][T25420] should_failslab+0x8c/0xb0 [ 683.136134][T25420] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 683.136166][T25420] ? sidtab_sid2str_get+0xa0/0x130 [ 683.136258][T25420] kmemdup_noprof+0x2b/0x70 [ 683.136283][T25420] sidtab_sid2str_get+0xa0/0x130 [ 683.136307][T25420] security_sid_to_context_core+0x1eb/0x2e0 [ 683.136334][T25420] security_sid_to_context+0x27/0x40 [ 683.136410][T25420] avc_audit_post_callback+0x9d/0x520 [ 683.136434][T25420] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 683.136457][T25420] common_lsm_audit+0x1b8/0x230 [ 683.136494][T25420] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 683.136523][T25420] slow_avc_audit+0x104/0x140 [ 683.136568][T25420] avc_has_extended_perms+0x6d0/0x940 [ 683.136598][T25420] ioctl_has_perm+0x257/0x2a0 [ 683.136620][T25420] selinux_file_ioctl+0x308/0x3a0 [ 683.136671][T25420] ? __fget_files+0x184/0x1c0 [ 683.136702][T25420] security_file_ioctl+0x48/0x90 [ 683.136739][T25420] __se_sys_ioctl+0x47/0x140 [ 683.136836][T25420] __x64_sys_ioctl+0x43/0x50 [ 683.136867][T25420] x64_sys_call+0x1816/0x2ff0 [ 683.136888][T25420] do_syscall_64+0xd2/0x200 [ 683.136944][T25420] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 683.136971][T25420] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 683.137001][T25420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.137027][T25420] RIP: 0033:0x7fcf94f0ebe9 [ 683.137046][T25420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.137090][T25420] RSP: 002b:00007fcf9396f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.137110][T25420] RAX: ffffffffffffffda RBX: 00007fcf95135fa0 RCX: 00007fcf94f0ebe9 [ 683.137121][T25420] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000003 [ 683.137133][T25420] RBP: 00007fcf9396f090 R08: 0000000000000000 R09: 0000000000000000 [ 683.137145][T25420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.137160][T25420] R13: 00007fcf95136038 R14: 00007fcf95135fa0 R15: 00007ffc44c3ed18 [ 683.137191][T25420] [ 683.484317][T25425] loop9: detected capacity change from 0 to 2048 [ 683.492480][T25426] loop7: detected capacity change from 0 to 512 [ 683.502056][T25425] EXT4-fs: inline encryption not supported [ 683.514604][T25426] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 683.540758][T25426] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.6989: corrupted in-inode xattr: overlapping e_value [ 683.547410][T25427] lo speed is unknown, defaulting to 1000 [ 683.562788][T25427] lo speed is unknown, defaulting to 1000 [ 683.604675][T25426] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6989: couldn't read orphan inode 15 (err -117) [ 683.627385][T25426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.665327][T25435] loop9: detected capacity change from 0 to 512 [ 683.730535][T25439] loop0: detected capacity change from 0 to 512 [ 683.748337][T25439] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 683.896023][T25439] EXT4-fs (loop0): failed to open journal device unknown-block(11,131) -6 [ 683.927491][T25453] loop9: detected capacity change from 0 to 512 [ 683.963551][T25455] netlink: 'syz.1.6997': attribute type 5 has an invalid length. [ 684.002944][ T29] kauditd_printk_skb: 2106 callbacks suppressed [ 684.002963][ T29] audit: type=1400 audit(713.130:126904): avc: denied { allowed } for pid=25456 comm="syz.9.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 684.093677][ T29] audit: type=1400 audit(713.172:126905): avc: denied { read write } for pid=22033 comm="syz-executor" name="loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 684.117502][ T29] audit: type=1400 audit(713.172:126906): avc: denied { open } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 684.141158][ T29] audit: type=1400 audit(713.172:126907): avc: denied { create } for pid=25456 comm="syz.9.6998" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 684.163221][ T29] audit: type=1400 audit(713.182:126908): avc: denied { ioctl } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 684.188477][ T29] audit: type=1400 audit(713.193:126909): avc: denied { create } for pid=25456 comm="syz.9.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 684.208095][ T29] audit: type=1400 audit(713.193:126910): avc: denied { read write } for pid=20740 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 684.233106][ T29] audit: type=1400 audit(713.193:126911): avc: denied { open } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 684.257390][ T29] audit: type=1400 audit(713.193:126912): avc: denied { ioctl } for pid=20740 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 684.284340][ T29] audit: type=1400 audit(713.203:126913): avc: denied { bind } for pid=25456 comm="syz.9.6998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 684.373483][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.426298][T25468] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7003'. [ 684.492293][T25470] loop7: detected capacity change from 0 to 2048 [ 684.519927][T25470] EXT4-fs: inline encryption not supported [ 684.558374][T25470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 684.573853][T25475] loop9: detected capacity change from 0 to 512 [ 684.588769][T25471] syzkaller0: entered promiscuous mode [ 684.594786][T25471] syzkaller0: entered allmulticast mode [ 684.603909][T25470] EXT4-fs error (device loop7): ext4_ext_precache:632: inode #2: comm syz.7.7002: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 684.648317][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.765695][T25485] loop9: detected capacity change from 0 to 1024 [ 684.805966][T25485] EXT4-fs: Ignoring removed mblk_io_submit option [ 684.909429][T25495] loop1: detected capacity change from 0 to 1024 [ 684.937712][T25495] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 684.978518][T25495] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 684.992383][T25497] loop9: detected capacity change from 0 to 8192 [ 684.999398][T25495] EXT4-fs (loop1): orphan cleanup on readonly fs [ 685.017785][T25495] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.7010: Invalid inode table block 0 in block_group 0 [ 685.036071][T25495] EXT4-fs (loop1): Remounting filesystem read-only [ 685.044207][T25495] EXT4-fs (loop1): 1 truncate cleaned up [ 685.055542][T25495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 685.057597][T25504] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7014'. [ 685.081541][T25497] loop9: detected capacity change from 0 to 1024 [ 685.109670][T25497] EXT4-fs: inline encryption not supported [ 685.116181][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.117297][T25497] EXT4-fs: Ignoring removed bh option [ 685.152842][T25507] loop0: detected capacity change from 0 to 2048 [ 685.169257][T25507] EXT4-fs: inline encryption not supported [ 685.190981][T25507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.204263][T25511] loop1: detected capacity change from 0 to 512 [ 685.215183][T25511] EXT4-fs (loop1): filesystem is read-only [ 685.222281][T25511] EXT4-fs (loop1): invalid inodes per group: 3 [ 685.222281][T25511] [ 685.245237][T25516] tipc: Enabling of bearer rejected, failed to enable media [ 685.254883][T25507] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.7016: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 685.301896][T25520] 9pnet_fd: Insufficient options for proto=fd [ 685.325232][T25520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35858 sclass=netlink_xfrm_socket pid=25520 comm=syz.7.7019 [ 685.388639][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.402571][T25524] FAULT_INJECTION: forcing a failure. [ 685.402571][T25524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.416633][T25524] CPU: 1 UID: 0 PID: 25524 Comm: syz.1.7022 Not tainted syzkaller #0 PREEMPT(voluntary) [ 685.416668][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.416682][T25524] Call Trace: [ 685.416690][T25524] [ 685.416758][T25524] __dump_stack+0x1d/0x30 [ 685.416785][T25524] dump_stack_lvl+0xe8/0x140 [ 685.416807][T25524] dump_stack+0x15/0x1b [ 685.416905][T25524] should_fail_ex+0x265/0x280 [ 685.416926][T25524] should_fail+0xb/0x20 [ 685.416997][T25524] should_fail_usercopy+0x1a/0x20 [ 685.417045][T25524] _copy_from_user+0x1c/0xb0 [ 685.417079][T25524] bpf_prog_test_run_xdp+0x84b/0x910 [ 685.417121][T25524] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 685.417140][T25524] bpf_prog_test_run+0x22a/0x390 [ 685.417174][T25524] __sys_bpf+0x4b9/0x7b0 [ 685.417245][T25524] __x64_sys_bpf+0x41/0x50 [ 685.417266][T25524] x64_sys_call+0x2aea/0x2ff0 [ 685.417344][T25524] do_syscall_64+0xd2/0x200 [ 685.417370][T25524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 685.417393][T25524] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 685.417460][T25524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.417483][T25524] RIP: 0033:0x7f8d76e1ebe9 [ 685.417501][T25524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.417523][T25524] RSP: 002b:00007f8d7587f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.417675][T25524] RAX: ffffffffffffffda RBX: 00007f8d77045fa0 RCX: 00007f8d76e1ebe9 [ 685.417691][T25524] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 685.417706][T25524] RBP: 00007f8d7587f090 R08: 0000000000000000 R09: 0000000000000000 [ 685.417717][T25524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.417729][T25524] R13: 00007f8d77046038 R14: 00007f8d77045fa0 R15: 00007ffe937dd838 [ 685.417747][T25524] [ 685.718206][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 685.727853][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 685.737393][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 685.746526][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 685.755436][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7023'. [ 685.765939][T25534] netlink: 'syz.1.7022': attribute type 10 has an invalid length. [ 685.801017][T25534] team0: Device hsr_slave_0 failed to register rx_handler [ 686.100692][T25553] loop0: detected capacity change from 0 to 2048 [ 686.111443][T25553] EXT4-fs: inline encryption not supported [ 686.134636][T25553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.151096][T25553] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #2: comm syz.0.7033: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 686.192720][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.371004][T25580] veth0: entered promiscuous mode [ 686.426411][T25580] ------------[ cut here ]------------ [ 686.432260][T25580] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000)(1) [ 686.454761][T25580] WARNING: CPU: 0 PID: 25580 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 686.465589][T25580] Modules linked in: [ 686.470179][T25580] CPU: 0 UID: 0 PID: 25580 Comm: syz.1.7041 Not tainted syzkaller #0 PREEMPT(voluntary) [ 686.480557][T25580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 686.490900][T25580] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 686.497512][T25580] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 686.518171][T25580] RSP: 0018:ffffc90002bcf440 EFLAGS: 00010292 [ 686.524775][T25580] RAX: b43308e3d1f36500 RBX: ffff88811278d840 RCX: 0000000000080000 [ 686.533182][T25580] RDX: ffffc90010db6000 RSI: 0000000000025e8f RDI: 0000000000025e90 [ 686.541702][T25580] RBP: 0000000000000000 R08: 0001c90002bcf27f R09: 0000000000000000 [ 686.550527][T25580] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811278d800 [ 686.558723][T25580] R13: ffff888159ce8000 R14: ffff888159ce8000 R15: ffff88811278d838 [ 686.567364][T25580] FS: 00007f8d7587f6c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000 [ 686.576796][T25580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.583733][T25580] CR2: 0000200000001500 CR3: 0000000113c44000 CR4: 00000000003506f0 [ 686.593061][T25580] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.601345][T25580] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 686.609888][T25580] Call Trace: [ 686.613246][T25580] [ 686.616244][T25580] reg_set_min_max+0x1eb/0x260 [ 686.621331][T25580] check_cond_jmp_op+0x1080/0x16e0 [ 686.627036][T25580] do_check+0x332a/0x7a10 [ 686.631888][T25580] do_check_common+0xc3a/0x12a0 [ 686.637643][T25580] bpf_check+0x942b/0xd9e0 [ 686.642417][T25580] ? __rcu_read_unlock+0x4f/0x70 [ 686.647876][T25580] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 686.654351][T25580] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 686.660447][T25580] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 686.660921][T25594] loop9: detected capacity change from 0 to 2048 [ 686.666832][T25580] ? css_rstat_updated+0xb7/0x240 [ 686.678928][T25580] ? pcpu_block_refresh_hint+0x10b/0x170 [ 686.681747][T25594] EXT4-fs: inline encryption not supported [ 686.685007][T25580] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 686.697105][T25580] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 686.703328][T25580] ? css_rstat_updated+0xb7/0x240 [ 686.708495][T25580] ? __rcu_read_unlock+0x4f/0x70 [ 686.713524][T25580] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 686.719617][T25580] ? should_fail_ex+0x30/0x280 [ 686.724507][T25580] ? selinux_bpf_prog_load+0x36/0xf0 [ 686.729999][T25580] ? should_failslab+0x8c/0xb0 [ 686.735007][T25580] ? __kmalloc_cache_noprof+0x189/0x320 [ 686.740733][T25580] ? selinux_bpf_prog_load+0xbf/0xf0 [ 686.746356][T25580] ? security_bpf_prog_load+0x2c/0xa0 [ 686.752062][T25580] bpf_prog_load+0xedd/0x1070 [ 686.757178][T25580] ? security_bpf+0x2b/0x90 [ 686.762174][T25580] __sys_bpf+0x462/0x7b0 [ 686.766676][T25580] __x64_sys_bpf+0x41/0x50 [ 686.771110][T25580] x64_sys_call+0x2aea/0x2ff0 [ 686.775917][T25580] do_syscall_64+0xd2/0x200 [ 686.780471][T25580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 686.787050][T25580] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 686.792930][T25580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.799382][T25580] RIP: 0033:0x7f8d76e1ebe9 [ 686.804162][T25580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.824193][T25580] RSP: 002b:00007f8d7587f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 686.832646][T25580] RAX: ffffffffffffffda RBX: 00007f8d77045fa0 RCX: 00007f8d76e1ebe9 [ 686.841304][T25580] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 686.849749][T25580] RBP: 00007f8d76ea1e19 R08: 0000000000000000 R09: 0000000000000000 [ 686.858162][T25580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.866659][T25580] R13: 00007f8d77046038 R14: 00007f8d77045fa0 R15: 00007ffe937dd838 [ 686.875276][T25580] [ 686.878389][T25580] ---[ end trace 0000000000000000 ]--- [ 686.913657][T25579] veth0: left promiscuous mode [ 686.925877][T25595] netlink: 'syz.0.7045': attribute type 1 has an invalid length. [ 686.963568][T25595] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.992522][T25595] bond2 (unregistering): Released all slaves [ 687.023341][T25607] loop7: detected capacity change from 0 to 128 [ 687.039888][T25607] FAULT_INJECTION: forcing a failure. [ 687.039888][T25607] name failslab, interval 1, probability 0, space 0, times 0 [ 687.052983][T25607] CPU: 0 UID: 0 PID: 25607 Comm: syz.7.7052 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 687.053019][T25607] Tainted: [W]=WARN [ 687.053026][T25607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 687.053037][T25607] Call Trace: [ 687.053045][T25607] [ 687.053054][T25607] __dump_stack+0x1d/0x30 [ 687.053090][T25607] dump_stack_lvl+0xe8/0x140 [ 687.053110][T25607] dump_stack+0x15/0x1b [ 687.053127][T25607] should_fail_ex+0x265/0x280 [ 687.053151][T25607] should_failslab+0x8c/0xb0 [ 687.053177][T25607] kmem_cache_alloc_noprof+0x50/0x310 [ 687.053206][T25607] ? vm_area_dup+0x33/0x2c0 [ 687.053236][T25607] vm_area_dup+0x33/0x2c0 [ 687.053261][T25607] __split_vma+0xe9/0x650 [ 687.053286][T25607] ? mas_find+0x5d5/0x700 [ 687.053314][T25607] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 687.053344][T25607] mmap_region+0x53f/0x1630 [ 687.053368][T25607] ? avc_compute_av+0x2fc/0x3e0 [ 687.053392][T25607] ? avc_perm_nonode+0x82/0xe0 [ 687.053431][T25607] do_mmap+0x9b3/0xbe0 [ 687.053467][T25607] vm_mmap_pgoff+0x17a/0x2e0 [ 687.053500][T25607] ksys_mmap_pgoff+0x268/0x310 [ 687.053531][T25607] x64_sys_call+0x14a3/0x2ff0 [ 687.053552][T25607] do_syscall_64+0xd2/0x200 [ 687.053580][T25607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 687.053606][T25607] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 687.053633][T25607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.053655][T25607] RIP: 0033:0x7f8d1378ebe9 [ 687.053673][T25607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.053692][T25607] RSP: 002b:00007f8d121f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 687.053713][T25607] RAX: ffffffffffffffda RBX: 00007f8d139b5fa0 RCX: 00007f8d1378ebe9 [ 687.053724][T25607] RDX: 000000000100000b RSI: 0000000000004000 RDI: 0000200000000000 [ 687.053736][T25607] RBP: 00007f8d121f7090 R08: 0000000000000004 R09: 0000000000000000 [ 687.053750][T25607] R10: 0000000000002013 R11: 0000000000000246 R12: 0000000000000001 [ 687.053763][T25607] R13: 00007f8d139b6038 R14: 00007f8d139b5fa0 R15: 00007ffdf5fc31f8 [ 687.053781][T25607] [ 687.278611][T25607] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 687.287112][T25607] FAT-fs (loop7): Filesystem has been set read-only [ 687.289833][T25610] loop0: detected capacity change from 0 to 512 [ 687.302690][T25607] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 687.312344][T25607] bio_check_eod: 9192 callbacks suppressed [ 687.312363][T25607] syz.7.7052: attempt to access beyond end of device [ 687.312363][T25607] loop7: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 687.320139][T25612] loop9: detected capacity change from 0 to 1024 [ 687.343830][T25612] EXT4-fs: Ignoring removed orlov option [ 687.344635][T25610] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.7045: corrupted inode contents [ 687.362511][T25610] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.7045: mark_inode_dirty error [ 687.375507][T25610] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.7045: corrupted inode contents [ 687.393437][T25610] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.7045: mark_inode_dirty error [ 687.419372][T25610] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7045: Failed to acquire dquot type 0 [ 687.435508][T25610] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7045: corrupted inode contents [ 687.452413][T25610] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.7045: mark_inode_dirty error [ 687.465594][T25610] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7045: corrupted inode contents [ 687.491100][T25610] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.7045: mark_inode_dirty error [ 687.527467][T25610] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7045: corrupted inode contents [ 687.553546][T25610] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 687.568334][T25630] program syz.6.7060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.579767][T25610] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7045: corrupted inode contents [ 687.583199][T25628] loop1: detected capacity change from 0 to 8192 [ 687.601467][T25610] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.7045: mark_inode_dirty error [ 687.633172][T25610] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 687.643363][T25610] EXT4-fs (loop0): 1 truncate cleaned up [ 687.650739][T25610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.680229][T25632] program syz.6.7061 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.695126][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.740999][T25636] __nla_validate_parse: 51 callbacks suppressed [ 687.741033][T25636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7063'. [ 687.850149][T25642] tipc: Enabling of bearer rejected, failed to enable media [ 687.971299][T25651] siw: device registration error -23 [ 687.997218][T25651] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7066'. [ 688.021113][T25651] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7066'. [ 688.236990][T25665] loop7: detected capacity change from 0 to 128 [ 688.254901][T25666] loop9: detected capacity change from 0 to 1024 [ 688.280643][T25665] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 688.288827][T25665] FAT-fs (loop7): Filesystem has been set read-only [ 688.306218][T25665] syz.7.7071: attempt to access beyond end of device [ 688.306218][T25665] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 688.321663][T25665] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 688.329885][T25665] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 688.365601][T25669] syz.7.7071: attempt to access beyond end of device [ 688.365601][T25669] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 688.379454][T25669] buffer_io_error: 9190 callbacks suppressed [ 688.379477][T25669] Buffer I/O error on dev loop7, logical block 2065, async page read [ 688.380583][T25668] netlink: 'syz.0.7072': attribute type 1 has an invalid length. [ 688.420483][T25668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.431963][T25669] syz.7.7071: attempt to access beyond end of device [ 688.431963][T25669] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 688.433422][T25673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7072'. [ 688.445799][T25669] Buffer I/O error on dev loop7, logical block 2066, async page read [ 688.471019][T25669] syz.7.7071: attempt to access beyond end of device [ 688.471019][T25669] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 688.484578][T25669] Buffer I/O error on dev loop7, logical block 2067, async page read [ 688.506274][T25669] syz.7.7071: attempt to access beyond end of device [ 688.506274][T25669] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 688.520426][T25669] Buffer I/O error on dev loop7, logical block 2068, async page read [ 688.530019][T25668] loop0: detected capacity change from 0 to 512 [ 688.539280][T25669] syz.7.7071: attempt to access beyond end of device [ 688.539280][T25669] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 688.540708][T25673] bond2 (unregistering): Released all slaves [ 688.553664][T25669] Buffer I/O error on dev loop7, logical block 2069, async page read [ 688.568465][T25669] syz.7.7071: attempt to access beyond end of device [ 688.568465][T25669] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 688.583005][T25669] Buffer I/O error on dev loop7, logical block 2070, async page read [ 688.591761][T25669] syz.7.7071: attempt to access beyond end of device [ 688.591761][T25669] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 688.605667][T25669] Buffer I/O error on dev loop7, logical block 2071, async page read [ 688.614465][T25669] syz.7.7071: attempt to access beyond end of device [ 688.614465][T25669] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 688.628299][T25669] Buffer I/O error on dev loop7, logical block 2072, async page read [ 688.637257][T25669] Buffer I/O error on dev loop7, logical block 2065, async page read [ 688.653085][T25668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.7072: corrupted inode contents [ 688.667758][T25668] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.7072: mark_inode_dirty error [ 688.680615][T25669] Buffer I/O error on dev loop7, logical block 2066, async page read [ 688.709272][T25668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.7072: corrupted inode contents [ 688.775622][T25668] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.7072: mark_inode_dirty error [ 688.793912][ T29] kauditd_printk_skb: 1164 callbacks suppressed [ 688.793930][ T29] audit: type=1400 audit(718.160:128074): avc: denied { unmount } for pid=22033 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 688.815049][T25668] Quota error (device loop0): write_blk: dquota write failed [ 688.837907][ T29] audit: type=1400 audit(718.202:128075): avc: denied { read write } for pid=22033 comm="syz-executor" name="loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 688.861564][ T29] audit: type=1400 audit(718.202:128076): avc: denied { open } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 688.885567][ T29] audit: type=1400 audit(718.202:128077): avc: denied { ioctl } for pid=22033 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=842 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 688.900754][T25668] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 688.918710][ T29] audit: type=1400 audit(718.286:128078): avc: denied { prog_load } for pid=25676 comm="syz.1.7074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 688.940592][ T29] audit: type=1400 audit(718.286:128079): avc: denied { bpf } for pid=25676 comm="syz.1.7074" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 688.961602][ T29] audit: type=1400 audit(718.286:128080): avc: denied { perfmon } for pid=25676 comm="syz.1.7074" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 688.964444][T25668] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7072: Failed to acquire dquot type 0 [ 688.986959][T25677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7074'. [ 689.029326][ T29] audit: type=1400 audit(718.359:128081): avc: denied { prog_run } for pid=25676 comm="syz.1.7074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 689.062135][T25681] netlink: 208 bytes leftover after parsing attributes in process `syz.9.7073'. [ 689.102002][T25681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25681 comm=syz.9.7073 [ 689.135889][T25668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7072: corrupted inode contents [ 689.137446][T25681] netlink: 256 bytes leftover after parsing attributes in process `syz.9.7073'. [ 689.202597][T25668] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.7072: mark_inode_dirty error [ 689.216079][T25668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7072: corrupted inode contents [ 689.241808][T25668] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.7072: mark_inode_dirty error [ 689.273530][T25668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7072: corrupted inode contents [ 689.306265][T25668] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 689.319503][T25695] loop7: detected capacity change from 0 to 128 [ 689.329538][T25668] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.7072: corrupted inode contents [ 689.369488][T25668] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.7072: mark_inode_dirty error [ 689.387733][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7080'. [ 689.404016][T25668] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 689.414477][T25692] loop1: detected capacity change from 0 to 8192 [ 689.430297][T25668] EXT4-fs (loop0): 1 truncate cleaned up [ 689.451497][T25695] program syz.7.7080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.455260][T25668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.475505][T25695] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 689.526707][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.680573][T25705] loop7: detected capacity change from 0 to 8192 [ 689.700093][T25709] tipc: Enabling of bearer rejected, failed to enable media [ 689.793450][T25711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7085'. [ 690.346477][T25726] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7092'. [ 690.496727][T25730] loop7: detected capacity change from 0 to 2048 [ 690.512393][T25730] EXT4-fs (loop7): failed to initialize system zone (-117) [ 690.530374][T25730] EXT4-fs (loop7): mount failed [ 690.712596][T25739] syzkaller0: entered promiscuous mode [ 690.718529][T25739] syzkaller0: entered allmulticast mode [ 690.865280][T25758] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 690.914942][T25757] loop7: detected capacity change from 0 to 8192 [ 691.191880][T25753] loop0: detected capacity change from 0 to 1024 [ 691.201398][T25753] EXT4-fs: test_dummy_encryption option not supported [ 693.168666][T25828] FAULT_INJECTION: forcing a failure. [ 693.168666][T25828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.182379][T25828] CPU: 0 UID: 0 PID: 25828 Comm: syz.1.7127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 693.182467][T25828] Tainted: [W]=WARN [ 693.182474][T25828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.182487][T25828] Call Trace: [ 693.182493][T25828] [ 693.182502][T25828] __dump_stack+0x1d/0x30 [ 693.182525][T25828] dump_stack_lvl+0xe8/0x140 [ 693.182544][T25828] dump_stack+0x15/0x1b [ 693.182636][T25828] should_fail_ex+0x265/0x280 [ 693.182661][T25828] should_fail+0xb/0x20 [ 693.182735][T25827] loop9: detected capacity change from 0 to 164 [ 693.182681][T25828] should_fail_usercopy+0x1a/0x20 [ 693.182788][T25828] _copy_to_user+0x20/0xa0 [ 693.182827][T25828] generic_map_lookup_batch+0x57a/0x7c0 [ 693.182857][T25828] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 693.182879][T25828] bpf_map_do_batch+0x1ba/0x380 [ 693.182984][T25828] ? security_bpf+0x2b/0x90 [ 693.183015][T25828] __sys_bpf+0x490/0x7b0 [ 693.183045][T25828] __x64_sys_bpf+0x41/0x50 [ 693.183068][T25828] x64_sys_call+0x2aea/0x2ff0 [ 693.183092][T25828] do_syscall_64+0xd2/0x200 [ 693.183120][T25828] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 693.183201][T25828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 693.183225][T25828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.183247][T25828] RIP: 0033:0x7f8d76e1ebe9 [ 693.183265][T25828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.183282][T25828] RSP: 002b:00007f8d7585e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 693.183334][T25828] RAX: ffffffffffffffda RBX: 00007f8d77046090 RCX: 00007f8d76e1ebe9 [ 693.183348][T25828] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 0000000000000018 [ 693.183361][T25828] RBP: 00007f8d7585e090 R08: 0000000000000000 R09: 0000000000000000 [ 693.183373][T25828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.183386][T25828] R13: 00007f8d77046128 R14: 00007f8d77046090 R15: 00007ffe937dd838 [ 693.183405][T25828] [ 693.442288][T25827] rock: directory entry would overflow storage [ 693.449547][T25827] rock: sig=0x66, size=4, remaining=3 [ 693.468671][T22051] Process accounting resumed [ 693.562429][ T29] kauditd_printk_skb: 1157 callbacks suppressed [ 693.562451][ T29] audit: type=1400 audit(723.155:129237): avc: denied { map_read map_write } for pid=25833 comm="syz.6.7130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 693.626722][ T29] audit: type=1400 audit(723.239:129238): avc: denied { unmount } for pid=21002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 693.628812][ T29] audit: type=1400 audit(723.239:129239): avc: denied { read write } for pid=21002 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.628846][ T29] audit: type=1400 audit(723.239:129240): avc: denied { open } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.632704][ T29] audit: type=1400 audit(723.239:129241): avc: denied { ioctl } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.636658][ T29] audit: type=1400 audit(723.239:129242): avc: denied { create } for pid=25836 comm="syz.7.7131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 693.804921][T25837] loop7: detected capacity change from 0 to 512 [ 693.808310][T25841] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.812722][T25837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 693.818969][T25841] audit: audit_lost=264 audit_rate_limit=0 audit_backlog_limit=64 [ 693.818992][T25841] audit: backlog limit exceeded [ 693.956657][T25837] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 693.964920][T25837] System zones: 0-2, 18-18, 34-35 [ 694.016961][T25837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.260069][T25837] syzkaller0: entered promiscuous mode [ 694.265665][T25837] syzkaller0: entered allmulticast mode [ 694.429636][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.663245][T25868] loop7: detected capacity change from 0 to 1024 [ 694.683805][T25870] loop0: detected capacity change from 0 to 512 [ 694.781402][T25870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.884352][T25868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.953567][T25870] macsec1: entered promiscuous mode [ 695.031824][T25870] bridge0: port 3(macsec1) entered blocking state [ 695.038804][T25870] bridge0: port 3(macsec1) entered disabled state [ 695.056593][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.166245][T25870] macsec1: entered allmulticast mode [ 695.171848][T25870] bridge0: entered allmulticast mode [ 695.196657][T25870] macsec1: left allmulticast mode [ 695.202761][T25870] bridge0: left allmulticast mode [ 695.220703][T25878] random: crng reseeded on system resumption [ 695.241709][T25883] netlink: 'syz.7.7143': attribute type 10 has an invalid length. [ 695.265493][T25881] pim6reg: entered allmulticast mode [ 695.276108][T25883] team0: Port device dummy0 added [ 695.285542][T25884] pim6reg: left allmulticast mode [ 695.288358][T25883] netlink: 'syz.7.7143': attribute type 10 has an invalid length. [ 695.380396][T25883] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 695.408106][T25883] team0: Failed to send options change via netlink (err -105) [ 695.418252][T25883] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 695.427950][T25883] team0: Port device dummy0 removed [ 695.441721][T25883] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 695.546508][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.554234][T25880] lo speed is unknown, defaulting to 1000 [ 695.559559][T25895] __nla_validate_parse: 2 callbacks suppressed [ 695.559574][T25895] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7150'. [ 695.563532][T25880] lo speed is unknown, defaulting to 1000 [ 695.670153][T25900] loop7: detected capacity change from 0 to 512 [ 695.691290][T25900] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 695.758655][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7154'. [ 695.775319][T25908] loop9: detected capacity change from 0 to 512 [ 695.841398][T25913] netlink: 14 bytes leftover after parsing attributes in process `syz.6.7156'. [ 695.856799][T25900] EXT4-fs (loop7): failed to open journal device unknown-block(11,131) -6 [ 695.877706][T25916] random: crng reseeded on system resumption [ 695.886390][T25913] bond0: (slave dummy0): Releasing backup interface [ 695.998811][T25923] loop7: detected capacity change from 0 to 512 [ 696.017505][T25923] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 696.030469][T25915] lo speed is unknown, defaulting to 1000 [ 696.040570][T25915] lo speed is unknown, defaulting to 1000 [ 696.058777][T25923] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #17: comm +}[@: iget: bad i_size value: -6917529027641081756 [ 696.081687][T25923] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm +}[@: couldn't read orphan inode 17 (err -117) [ 696.086139][T25925] loop9: detected capacity change from 0 to 8192 [ 696.117950][T25923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.148977][T25925] loop9: detected capacity change from 0 to 1024 [ 696.170983][T25923] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 65: padding at end of block bitmap is not set [ 696.173433][T25925] EXT4-fs: inline encryption not supported [ 696.204624][T25934] loop6: detected capacity change from 0 to 764 [ 696.207908][T25925] EXT4-fs: Ignoring removed bh option [ 696.220345][T25923] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 0 [ 696.254576][T25934] rock: directory entry would overflow storage [ 696.261039][T25934] rock: sig=0x4654, size=5, remaining=4 [ 696.304900][T25936] tipc: Enabling of bearer rejected, failed to enable media [ 696.483648][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.569055][T25940] syzkaller1: entered promiscuous mode [ 696.575113][T25940] syzkaller1: entered allmulticast mode [ 696.628870][T25948] random: crng reseeded on system resumption [ 696.738941][T25954] netlink: 'syz.7.7171': attribute type 49 has an invalid length. [ 696.852131][T25965] loop1: detected capacity change from 0 to 512 [ 696.868086][T25965] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7176: corrupted in-inode xattr: invalid ea_ino [ 696.884181][T25965] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7176: couldn't read orphan inode 15 (err -117) [ 696.897953][T25965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.976896][T25970] loop0: detected capacity change from 0 to 1024 [ 696.985088][T25970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 696.992246][T25970] EXT4-fs: Ignoring removed orlov option [ 697.012547][T25970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.107922][T20740] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.126755][T25979] loop7: detected capacity change from 0 to 512 [ 697.154721][T25979] EXT4-fs (loop7): filesystem is read-only [ 697.161058][T25979] EXT4-fs (loop7): invalid inodes per group: 3 [ 697.161058][T25979] [ 697.289533][T25983] can: request_module (can-proto-0) failed. [ 697.380040][T26007] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7176'. [ 697.504733][T26013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26013 comm=syz.6.7189 [ 697.531519][T26016] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7191'. [ 697.540905][T26016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7191'. [ 697.720073][T26012] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7190'. [ 697.766019][T26025] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7194'. [ 697.819749][T26030] random: crng reseeded on system resumption [ 697.975851][T26039] loop6: detected capacity change from 0 to 512 [ 698.002766][T26039] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 698.011015][T26039] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 698.019668][T26039] System zones: 0-1, 15-15, 18-18, 34-34 [ 698.025734][T26039] EXT4-fs (loop6): orphan cleanup on readonly fs [ 698.040438][T26039] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.7199: casefold flag without casefold feature [ 698.064787][T26039] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7199: couldn't read orphan inode 16 (err -117) [ 698.082375][T26039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 698.105348][T26039] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 698.113628][T26039] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002] [ 698.146636][T26039] netlink: 5 bytes leftover after parsing attributes in process `syz.6.7199'. [ 698.176693][T26039] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 698.187338][T26039] 0ªî{X¹¦: entered allmulticast mode [ 698.202974][T26039] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 698.205243][T26054] loop7: detected capacity change from 0 to 1024 [ 698.245416][T26054] EXT4-fs: inline encryption not supported [ 698.266127][T26054] EXT4-fs (loop7): orphan cleanup on readonly fs [ 698.274478][T26054] EXT4-fs (loop7): 1 truncate cleaned up [ 698.288142][T26054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 698.319424][T18635] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.329953][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.341124][ T29] kauditd_printk_skb: 1631 callbacks suppressed [ 698.341139][ T29] audit: type=1400 audit(728.190:130867): avc: denied { prog_load } for pid=26058 comm="syz.0.7207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 698.367137][ T29] audit: type=1400 audit(728.190:130868): avc: denied { bpf } for pid=26058 comm="syz.0.7207" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.390656][ T29] audit: type=1400 audit(728.211:130869): avc: denied { read write } for pid=21002 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.415528][ T29] audit: type=1400 audit(728.211:130870): avc: denied { read write open } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.440951][ T29] audit: type=1400 audit(728.211:130871): avc: denied { ioctl } for pid=21002 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 698.466604][ T29] audit: type=1400 audit(728.232:130872): avc: denied { perfmon } for pid=26058 comm="syz.0.7207" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.488347][ T29] audit: type=1400 audit(728.232:130873): avc: denied { bpf } for pid=26058 comm="syz.0.7207" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.509888][ T29] audit: type=1400 audit(728.232:130874): avc: denied { read write } for pid=18635 comm="syz-executor" name="loop6" dev="devtmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 698.534205][ T29] audit: type=1400 audit(728.232:130875): avc: denied { open } for pid=18635 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 698.558680][ T29] audit: type=1400 audit(728.232:130876): avc: denied { ioctl } for pid=18635 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=871 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 698.601552][T26066] loop7: detected capacity change from 0 to 512 [ 698.643625][T26066] EXT4-fs (loop7): filesystem is read-only [ 698.650054][T26066] EXT4-fs (loop7): invalid inodes per group: 3 [ 698.650054][T26066] [ 698.764967][T26067] lo speed is unknown, defaulting to 1000 [ 698.796229][T26067] lo speed is unknown, defaulting to 1000 [ 698.843902][T26082] loop0: detected capacity change from 0 to 128 [ 698.896560][T26087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7218'. [ 699.104020][T26095] syzkaller0: entered promiscuous mode [ 699.109774][T26095] syzkaller0: entered allmulticast mode [ 699.210372][T26109] sch_fq: defrate 4294967295 ignored. [ 699.283158][T26113] loop7: detected capacity change from 0 to 512 [ 699.303711][T26113] EXT4-fs (loop7): filesystem is read-only [ 699.309911][T26113] EXT4-fs (loop7): invalid inodes per group: 3 [ 699.309911][T26113] [ 699.590101][T26126] loop7: detected capacity change from 0 to 1024 [ 699.613088][T26126] EXT4-fs: Ignoring removed bh option [ 699.723944][T26126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 699.791455][T26126] SELinux: failed to load policy [ 700.235973][T22182] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 700.406944][T26138] loop7: detected capacity change from 0 to 8192 [ 700.544276][T26145] random: crng reseeded on system resumption [ 700.637392][T26155] loop0: detected capacity change from 0 to 512 [ 700.655233][T26155] EXT4-fs (loop0): filesystem is read-only [ 700.662249][T26155] EXT4-fs (loop0): invalid inodes per group: 3 [ 700.662249][T26155] [ 700.683666][T26143] syzkaller0: entered promiscuous mode [ 700.689234][T26143] syzkaller0: entered allmulticast mode [ 700.704100][T22033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.752259][ T6995] IPVS: starting estimator thread 0... [ 700.778625][T26160] __nla_validate_parse: 6 callbacks suppressed [ 700.778646][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7238'. [ 700.794568][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7238'. [ 700.804120][T26160] netlink: 'syz.0.7238': attribute type 18 has an invalid length. [ 700.834647][T11548] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.843131][T11548] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.852854][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7238'. [ 700.862471][T26160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7238'. [ 700.872521][T26160] netlink: 'syz.0.7238': attribute type 18 has an invalid length. [ 700.881507][T26158] IPVS: using max 2784 ests per chain, 139200 per kthread [ 700.894817][T26146] ================================================================== [ 700.903067][T26146] BUG: KCSAN: data-race in __mod_timer / blk_add_timer [ 700.910079][T26146] [ 700.912656][T26146] write to 0xffff8881016edc48 of 8 bytes by task 26138 on cpu 0: [ 700.920662][T26146] __mod_timer+0x5a1/0x840 [ 700.925454][T26146] mod_timer+0x1f/0x30 [ 700.929637][T26146] blk_add_timer+0x182/0x1a0 [ 700.934454][T26146] blk_mq_start_request+0x183/0x3d0 [ 700.939818][T26146] loop_queue_rq+0x43/0x680 [ 700.944728][T26146] blk_mq_request_issue_directly+0x1e6/0x380 [ 700.951062][T26146] blk_mq_issue_direct+0x19d/0x530 [ 700.956290][T26146] blk_mq_dispatch_queue_requests+0x1fc/0x350 [ 700.962384][T26146] blk_mq_flush_plug_list+0x2b6/0x330 [ 700.967862][T26146] __blk_flush_plug+0x222/0x2a0 [ 700.972889][T26146] __submit_bio+0x2fc/0x4d0 [ 700.977624][T26146] submit_bio_noacct_nocheck+0x208/0x6a0 [ 700.983838][T26146] submit_bio_noacct+0x6ed/0x920 [ 700.989007][T26146] submit_bio+0x2a6/0x2c0 [ 700.993463][T26146] submit_bh_wbc+0x2e0/0x320 [ 700.998184][T26146] __sync_dirty_buffer+0x16b/0x230 [ 701.004015][T26146] sync_dirty_buffer+0x1a/0x30 [ 701.008953][T26146] fat_mirror_bhs+0x270/0x320 [ 701.013752][T26146] fat_alloc_clusters+0x98b/0xa80 [ 701.019420][T26146] fat_get_block+0x258/0x5e0 [ 701.024217][T26146] __block_write_begin_int+0x3fd/0xf90 [ 701.030045][T26146] cont_write_begin+0x5fc/0x970 [ 701.034955][T26146] fat_write_begin+0x4f/0xe0 [ 701.039562][T26146] generic_perform_write+0x184/0x490 [ 701.044952][T26146] __generic_file_write_iter+0x9e/0x120 [ 701.050633][T26146] generic_file_write_iter+0x8d/0x2f0 [ 701.056281][T26146] vfs_write+0x52a/0x960 [ 701.060826][T26146] ksys_write+0xda/0x1a0 [ 701.065088][T26146] __x64_sys_write+0x40/0x50 [ 701.069883][T26146] x64_sys_call+0x27fe/0x2ff0 [ 701.074660][T26146] do_syscall_64+0xd2/0x200 [ 701.079371][T26146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.085337][T26146] [ 701.087872][T26146] read to 0xffff8881016edc48 of 8 bytes by task 26146 on cpu 1: [ 701.095801][T26146] blk_add_timer+0x115/0x1a0 [ 701.100436][T26146] blk_mq_start_request+0x183/0x3d0 [ 701.105679][T26146] loop_queue_rq+0x43/0x680 [ 701.110507][T26146] blk_mq_request_issue_directly+0x1e6/0x380 [ 701.116588][T26146] blk_mq_issue_direct+0x19d/0x530 [ 701.122264][T26146] blk_mq_dispatch_queue_requests+0x1fc/0x350 [ 701.128460][T26146] blk_mq_flush_plug_list+0x2b6/0x330 [ 701.134227][T26146] __blk_flush_plug+0x222/0x2a0 [ 701.139195][T26146] __submit_bio+0x2fc/0x4d0 [ 701.143831][T26146] submit_bio_noacct_nocheck+0x208/0x6a0 [ 701.149755][T26146] submit_bio_noacct+0x6ed/0x920 [ 701.155193][T26146] submit_bio+0x2a6/0x2c0 [ 701.159556][T26146] submit_bh_wbc+0x2e0/0x320 [ 701.164166][T26146] write_dirty_buffer+0xee/0x120 [ 701.169305][T26146] fat_sync_bhs+0x49/0x130 [ 701.174084][T26146] fat_ent_write+0x91/0xe0 [ 701.178665][T26146] fat_chain_add+0x15d/0x440 [ 701.183272][T26146] fat_get_block+0x46c/0x5e0 [ 701.187892][T26146] __block_write_begin_int+0x3fd/0xf90 [ 701.193451][T26146] cont_write_begin+0x5fc/0x970 [ 701.198538][T26146] fat_write_begin+0x4f/0xe0 [ 701.203140][T26146] generic_perform_write+0x184/0x490 [ 701.208613][T26146] __generic_file_write_iter+0x9e/0x120 [ 701.214430][T26146] generic_file_write_iter+0x8d/0x2f0 [ 701.220104][T26146] vfs_write+0x52a/0x960 [ 701.224650][T26146] ksys_write+0xda/0x1a0 [ 701.229107][T26146] __x64_sys_write+0x40/0x50 [ 701.233725][T26146] x64_sys_call+0x27fe/0x2ff0 [ 701.238505][T26146] do_syscall_64+0xd2/0x200 [ 701.243200][T26146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.249285][T26146] [ 701.251627][T26146] value changed: 0x000000010000b3b8 -> 0x000000010000aa75 [ 701.258744][T26146] [ 701.261098][T26146] Reported by Kernel Concurrency Sanitizer on: [ 701.267344][T26146] CPU: 1 UID: 0 PID: 26146 Comm: syz.7.7231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 701.278933][T26146] Tainted: [W]=WARN [ 701.282843][T26146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.293021][T26146] ================================================================== [ 701.305178][T11548] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.330522][T11548] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0