last executing test programs: 3m42.519067171s ago: executing program 32 (id=1297): syz_io_uring_setup(0x562a, 0x0, 0x0, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0x0, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x405}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x9, 0x1a1300) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000014, 0x0, 0x0, 0x0, 0xd, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000e0ffffffffffffff00", "90be8b1c551265406c7f309a03d8a0f49d00", [0x6, 0x7f]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x1, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES8=r6], 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)}, 0x64) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x10) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r9}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080015400000000008"], 0x48}}, 0x4000000) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x6a, 0x1, 0x70bd27, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_io_uring_submit(0x0, r0, 0x0) 3m7.643794037s ago: executing program 33 (id=1874): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) fcntl$setlease(r2, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX=r3, @ANYRES8, @ANYRES8, @ANYRES16, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='btrfs_reserve_ticket\x00'}, 0x18) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x93) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xe000202b}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r4], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "dca293f818fabbba"}, 0x38) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x4, 0x7, {{0x18, 0x4, 0x3, 0x6, 0x60, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x4, 0x0}, {[@timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x2, [{@multicast1, 0x7}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x8}, {@private=0xa010100, 0x81}, {@broadcast, 0xd87}, {@multicast2, 0x6e58}, {@local, 0x6}]}, @lsrr={0x83, 0xf, 0x58, [@private=0xa010100, @multicast2, @empty]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_user(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745fc2c7aa44d9775a723a666f6e74735f743a"], 0x26) 2m4.651027322s ago: executing program 34 (id=2880): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0xecff, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m18.667531715s ago: executing program 3 (id=3480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2318c1d, &(0x7f0000000640), 0xfd, 0x51c, &(0x7f0000000780)="$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") listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 1m17.911688047s ago: executing program 3 (id=3491): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001"], 0x104}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000080)=0x1000, 0x4) clock_adjtime(0x0, &(0x7f0000000380)={0xffffffffffff2b95, 0x81, 0x1, 0x94a, 0x100, 0xfffffffffffffff5, 0x7e, 0x8000000000000000, 0x200000000000ffb, 0xffffffff993c7bbe, 0x3b9ac9ff, 0x9854, 0x845, 0x9, 0xfff, 0x9, 0x6, 0x9a000004, 0x5, 0x2, 0x3, 0x7, 0x7, 0xc, 0x8000000000000003, 0x8}) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) 1m17.875709888s ago: executing program 35 (id=3491): syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRES8=0x0], 0x3, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001"], 0x104}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000080)=0x1000, 0x4) clock_adjtime(0x0, &(0x7f0000000380)={0xffffffffffff2b95, 0x81, 0x1, 0x94a, 0x100, 0xfffffffffffffff5, 0x7e, 0x8000000000000000, 0x200000000000ffb, 0xffffffff993c7bbe, 0x3b9ac9ff, 0x9854, 0x845, 0x9, 0xfff, 0x9, 0x6, 0x9a000004, 0x5, 0x2, 0x3, 0x7, 0x7, 0xc, 0x8000000000000003, 0x8}) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) 1m13.856771762s ago: executing program 7 (id=3534): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300000000687e"], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0xef, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x40000000800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007800000080000000800000005"], 0x48) r1 = syz_open_dev$sg(&(0x7f0000000040), 0xffffdffffffffffc, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0003b2a0d528e658904425eb5fa3a5"], 0x48) socket(0x29, 0x3, 0xf5c5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x7, 0x20000003ff, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) 1m13.761395184s ago: executing program 7 (id=3537): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000cd0d2ceef2f17d54e19b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setresgid(0xee00, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fspick(r8, &(0x7f0000000180)='./file0\x00', 0x1) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m12.855411138s ago: executing program 7 (id=3549): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffb, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {0xffff0001, 0x0, 0x0, 0xfffffffc, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x0, 0x40000000, 0x80000001}, {}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000000}, {0x4}, {0x4, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], [{0x4}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x2}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m12.849758768s ago: executing program 7 (id=3550): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0871dd61703eefe87ff070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac00a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e40000000000000000adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54eb44affe1cd0f14d124df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1235cf309650cdf8c6cd950c477890089be400b26dedec1199479b1b5adfaf2b6e05b7f90c9098ed4accddabd802ac5dc1b436e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x20800) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x94) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ptrace$pokeuser(0x6, r2, 0x358, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) 1m12.689932911s ago: executing program 7 (id=3555): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1m12.266466208s ago: executing program 7 (id=3557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000001880)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x61c2e846}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 1m12.266257477s ago: executing program 36 (id=3557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000001880)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x61c2e846}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 1m9.64146454s ago: executing program 1 (id=3597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r3 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x22c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x86c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x840, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x0, 0x4, 0x8, 0xffffffff, 0x2, 0xa, 0x1, 0x80, 0xffff8000, 0xffff, 0x3, 0x5, 0x7, 0x80, 0x5, 0xbecf, 0x80000001, 0x38000, 0x8, 0x0, 0xc, 0x7, 0x8, 0x3, 0x1, 0x9, 0x5, 0x9, 0x2, 0xb00e, 0x3, 0x10, 0x0, 0x9, 0x10001, 0x15fa, 0x7cc, 0xd5, 0x47d, 0x6, 0x9, 0x9, 0x200, 0xf1, 0x3, 0xb7b1, 0x5, 0x30, 0x8, 0x7f, 0x3, 0x10001, 0x7, 0x10001, 0x7fffffff, 0x6, 0x4, 0x9, 0x7, 0xe17, 0x18000, 0x0, 0x4, 0xa36a, 0xc95d, 0xfffffb79, 0x52, 0x4, 0xa, 0x5, 0x0, 0x0, 0x5, 0x4, 0x4, 0x7, 0x6, 0xa9ac, 0x5, 0x6, 0x8, 0x6, 0x0, 0x9, 0x2, 0x0, 0x2d1, 0x2, 0xd636, 0x1, 0x0, 0x5, 0x382, 0x347f, 0x9e, 0x0, 0xb, 0x2, 0x2, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7, 0x8, 0xaa, 0x101, 0x8, 0xfffffff0, 0xff, 0x1, 0xb, 0x91, 0x6, 0x6d6, 0x0, 0x6c, 0xfffffffb, 0x24e018b5, 0x80, 0x81, 0x3, 0xf6, 0x80, 0x80000001, 0x9, 0x9, 0x1, 0xe, 0x6, 0xfd9, 0x4, 0xff, 0x328, 0x10001, 0x1, 0x8b, 0x0, 0x3, 0x7, 0xfff, 0x3a, 0x3, 0x6, 0x16fc, 0xfffffffe, 0x39, 0x6, 0x4, 0x3, 0x2b, 0x5, 0x9, 0x3, 0x3, 0xff, 0xde81, 0x9, 0x0, 0x1, 0x10, 0x9, 0x8, 0x10000, 0x40, 0x1, 0x2, 0x800, 0x200, 0x1, 0x4a18, 0x4, 0x9, 0x8000, 0x9, 0x800, 0x2, 0xe5b1, 0x1, 0x8, 0x2, 0x5, 0x5, 0x8, 0x5, 0x5, 0x9, 0x7, 0x7, 0x9, 0x3, 0x3, 0x9, 0x7ff, 0x5, 0x6, 0x10000, 0x0, 0x5, 0x81, 0xc, 0x1, 0xa, 0x9, 0x5, 0x10, 0xf9, 0x3, 0x3, 0xff, 0x3969, 0x0, 0x8, 0x5, 0x10, 0x3, 0x0, 0x5, 0x7f, 0x80000001, 0x200, 0x400, 0x3, 0xffffffff, 0x401, 0x3, 0x9c, 0x7, 0xd6, 0x2, 0xfff, 0x1069, 0x0, 0x6, 0xfffffffe, 0x4, 0x3, 0x4efe, 0x9c16, 0x8, 0x5, 0x9, 0x1, 0x4, 0xff7, 0x7, 0xe63, 0x3, 0x2, 0x6, 0x9, 0x8000, 0x6, 0xffff8001]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b66349e05b59aa}]}}]}, 0x86c}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x68cb, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0xffffff}, 0x1c) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x0, 0xfffffffd}}) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r10) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xd3eb}, 0x8) socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r10, 0xc0389424, &(0x7f0000000240)={0x2, 0x18, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) 1m9.125666098s ago: executing program 1 (id=3605): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095b9cc6b32dfe6e2d179780563664be5e863e6b8f75dc42ca4e0538cf15b4b541350c7e75202bb876b42041730ef41db5dec0617890a029fc15f816c1698d5e11dca68e9e2be1ddb60b7d42311097d2d540655374f1ac2a28662e6d6aa55b0544e2851ad96c6786e77004c935f2573c1c0c9e3d4030e55ac58de3ecd", @ANYBLOB="1c4204992ed6c356d5f45ce56006d6e6520d7bc27ff7ebc67ba75a91e6a3f74316f97afa94c8c16a6b4b52bcf4c1054fd5500211d3af2066850a426a11c8a0b80c81ffe6"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendfile(r0, r0, 0x0, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) utime(&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 1m9.01485934s ago: executing program 1 (id=3608): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3b, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00"/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") getresgid(&(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000340)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x20000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}, 0xa5f}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x20000041) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0x7, 0x5, 0x7, 0x80f5}, {0x2, 0x57, 0x4f, 0xf82}, {0x4, 0x6}]}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=""/131, 0x83) 1m9.01422494s ago: executing program 1 (id=3609): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc700000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0871dd61703eefe87ff070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac00a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fba55af17663fecf1b5c5a76cf07615c7ee54c361449e275371a8c4243b9060ecdeecfb1603b061a8a62159830049061800953f7d00c43c95068c62c2ca1ad7fea9de97216dbc9c8e36a5607608e77d1d7d72b78b4f1eab8e40000000000000000adc90eb850f42f44e4b48c9cc39412c0ce6c9f4b95936ec36efc8dfbc54eb44affe1cd0f14d124df0c29c51b5628646b8155a1859358aa08f71fd2d9b2c4288a0d8870e8767173c65476e1a4f000c580f61d73f5be35ca1aa1235cf309650cdf8c6cd950c477890089be400b26dedec1199479b1b5adfaf2b6e05b7f90c9098ed4accddabd802ac5dc1b436e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x20800) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x94) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ptrace$pokeuser(0x6, r2, 0x358, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) 1m8.9884311s ago: executing program 6 (id=3610): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40003a000a000200ffffffffffff000008000f"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) iopl(0x3) 1m8.915232251s ago: executing program 6 (id=3613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x2}}}}]}, 0x40}}, 0x0) 1m8.800778273s ago: executing program 1 (id=3618): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) modify_ldt$write(0x1, &(0x7f00000000c0)={0x40, 0x20000000}, 0x10) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$zero(0xffffffffffffff9c, 0x0, 0x10480, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) syz_usb_connect(0x5, 0x3d, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) socket$inet6_udplite(0xa, 0x2, 0x88) 1m8.172365753s ago: executing program 1 (id=3625): syz_emit_ethernet(0x66, &(0x7f00000010c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa0086dd60003a0400033a00fe8000000000000000000000000000bbff0200"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000700000095"], 0x0, 0x2, 0x4e, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r10, @ANYRESOCT=r11, @ANYRES8=r12], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x0, 0x1, 0x92, &(0x7f0000000240)='4', &(0x7f0000000300)=""/146, 0x1, 0x0, 0x34, 0xb1, &(0x7f00000003c0)="0d32e4bebc22cf9c042ad54ea1bdae782e0c8351f5348e5dd626f5f85fd5c4619841da203d23f2047091b2f5fdadebf02c75a0a5", &(0x7f0000000400)="990877e43295e084bfd7796dd0ac7ade0cd4484ed07ac02611b42afda6618cc5e46a85586a7181073bc5c020fe39b369a08b8cb26e0014b1cf05610cb15d5cbe3b31511bf48c40c0d79559b8cec05c1c5c7aac75f88a9427fd562200361b11f5abdb73501ae949f373e7330dcd1c4f163dc6f542010ef7ddf8c1724e87c2eb50b006b46e52af504277e4c1a4ec16d11fe8c708b7e671221a9b6ac2a720eef90a48865689ad373fd98d6960822f1151785a", 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030428b570000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r13}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 1m8.134763203s ago: executing program 37 (id=3625): syz_emit_ethernet(0x66, &(0x7f00000010c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa0086dd60003a0400033a00fe8000000000000000000000000000bbff0200"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000700000095"], 0x0, 0x2, 0x4e, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r10, @ANYRESOCT=r11, @ANYRES8=r12], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r10, 0x0, 0x1, 0x92, &(0x7f0000000240)='4', &(0x7f0000000300)=""/146, 0x1, 0x0, 0x34, 0xb1, &(0x7f00000003c0)="0d32e4bebc22cf9c042ad54ea1bdae782e0c8351f5348e5dd626f5f85fd5c4619841da203d23f2047091b2f5fdadebf02c75a0a5", &(0x7f0000000400)="990877e43295e084bfd7796dd0ac7ade0cd4484ed07ac02611b42afda6618cc5e46a85586a7181073bc5c020fe39b369a08b8cb26e0014b1cf05610cb15d5cbe3b31511bf48c40c0d79559b8cec05c1c5c7aac75f88a9427fd562200361b11f5abdb73501ae949f373e7330dcd1c4f163dc6f542010ef7ddf8c1724e87c2eb50b006b46e52af504277e4c1a4ec16d11fe8c708b7e671221a9b6ac2a720eef90a48865689ad373fd98d6960822f1151785a", 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030428b570000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r13}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 1m8.104977074s ago: executing program 6 (id=3628): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x2, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000200)) 1m8.086992334s ago: executing program 6 (id=3629): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x20800) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x94) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ptrace$pokeuser(0x6, r2, 0x358, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) 1m7.988181236s ago: executing program 6 (id=3631): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) fallocate(r0, 0x26, 0x1be5, 0x8) 1m7.270360197s ago: executing program 6 (id=3639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000845}, 0x10) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000000c0)='./file0\x00', 0x0) 1m7.269721267s ago: executing program 38 (id=3639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000845}, 0x10) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f00000000c0)='./file0\x00', 0x0) 1m4.931454695s ago: executing program 5 (id=3657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) (async, rerun: 32) r6 = socket(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x8, 0x6, 0x7, {{0x21, 0x4, 0x0, 0x3e, 0x84, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0xb, 0xd8, [@local, @private=0xa010102]}, @timestamp_addr={0x44, 0x4, 0xc1, 0x1, 0x1}, @ssrr={0x89, 0x7, 0x4, [@multicast1]}, @ssrr={0x89, 0x7, 0x38, [@empty]}, @cipso={0x86, 0x9, 0xfffffffffffffffc, [{0x1, 0x3, '|'}]}, @cipso={0x86, 0x48, 0x2, [{0x4919a39abd8f42bb, 0x4, "f16d"}, {0x0, 0xf, "718935540cba75fc5334370206"}, {0x5, 0xf, "cd587faefc4eb13fa0899006ec"}, {0x5, 0x12, "17b5180962c1645d0ae0683db6ab8da7"}, {0x7, 0xe, "bde111e850d0fbdd8e560f53"}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e24, 0x101, 0x4e22, 0x2, 0x2, 0x80, 0xa0, 0x73, r8, 0xee01}, {0xef, 0x4, 0xd1d2, 0xfffffffffffffffc, 0x7, 0x4, 0x8000000000000001, 0x1}, {0x8000000000000001, 0x6, 0x4, 0x6}, 0x0, 0x6e6bb7, 0x2, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d5, 0x32}, 0x2, @in6=@empty, 0x3500, 0xd1df670618a09405, 0x0, 0x16, 0x7, 0x4, 0x5}}, 0xe8) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fcntl$setpipe(r6, 0x407, 0x6) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f00000005c0)=""/169, &(0x7f0000000140)=0xa9) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 1m4.61098171s ago: executing program 5 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x400) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) open(0x0, 0x40542, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r2, 0x0, 0x0) 1m4.362076034s ago: executing program 5 (id=3664): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a40)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000380)=""/43, 0x2b, 0x0, &(0x7f0000002980)=""/148, 0x94}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="000000000000000057665ff252afd7134c7e5cc9abb7080000000004007b82f8ff0033d775ffefb7030000084000b70400000800000000df5ede05f63bd74f00bac8e777475d06000000c10691be"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002840), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="1e00000007000000ff0f0000dd00000040430000", @ANYRES32, @ANYBLOB="0000000000b20000000000008000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0400000002000000050000000e00"/28], 0x50) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000002900)={0x0, 0x4fa8, 0x0, 0x1, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x600, 0x1, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xe9}, 0x1c, &(0x7f0000002780)=[{&(0x7f00000005c0)="ab74725770f0212df9953ccf54f0ee05a604efb9eff7d9c993713e8e4c5ceee0441220ce894e9e1d43caddf925b440a96ec9e37f5f9a6a3ed18add8715c4f26e6767101becc60b7c4ca7bcf1dfee0e47f36338ff6f02f676d6c6d3fa911dccc13da14bfb470480a6002069b0aca3e2f1e1470e42b25556465e4c6a3d91cd945cc4f619568cde8cbc624993d8a4f88e4367f266b332ff3fbd0679140b3f5319dc63a96384a11dc1f9c3de861ecf783a7b0727bd4e286badcf347ca4b459f347eee12789539554ec9bbe7f0f88dcd70793123b4d407910278b4b7414161cae99eb264593e4bad1", 0xe6}, {&(0x7f00000000c0)="57c3ab454e34ad66840e6f007e5e3c218d2ddf7a58821badd0fb64bf723d55baf9874dde8dc03505738f0da735d43edfef4beb2471264fd03bede95cfa5f9f985a57f22201919b9f2a8cc96c25d298adb5ebdddf235f02", 0x57}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000040)="bc1f6c6299e07f22ccabde0856c060f667ebfa0721b169251b361198ec4fe19367e576d8fe94e980f9db46441eccdcb8ba82c37d39683a25b44cb9dc9e56fd", 0x3f}, {&(0x7f00000016c0)="3980df945851b7a6ebe398e7043f526103c8ac0fe74f17a70f4140203b6ee601e601d49e24bf132e8277fd0219156b3407ad0f867f4f593ad8c893206a337cb27673349753bf8124e9d43d2498c5b9f9bc14959da70e85a508b2f6e453e034b8a87825b6ef16753823737739cb8ba3695179a120235aae8b9acb494b34c586d4049829b06e3f385852614f7bbab3f315661e9c0fb78b66c718a19846eeb5f8dbb266900d9b60350e51c106d2feac3e0c29d86f060cf91d2a62234aaf64", 0xbd}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000000280)="0e51", 0x2}, {&(0x7f0000000300)="31566bfd093ad3f62e8458f126f9ef62fb", 0x11}, {&(0x7f0000000340)="bad76d7bd7c5c722a06650a5e50ab34b1f", 0x11}], 0x9, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x30}, 0x11) 1m4.048249199s ago: executing program 5 (id=3668): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x20800) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x94) r2 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ptrace$pokeuser(0x6, r2, 0x358, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) 1m3.691415555s ago: executing program 5 (id=3669): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xac}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0xd6, &(0x7f0000000280)=""/214, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0xe, 0x0, 0x89b3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x2, 0x5, 0x1, 0x2}, {0x1, 0x5, 0xa, 0x9}, {0x3, 0x4, 0x3, 0x1}, {0x1, 0x3, 0x6}, {0x2, 0x4, 0xc, 0x7}], 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) r5 = dup2(r3, r4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x20) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 1m2.511100303s ago: executing program 5 (id=3676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) fstat(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) setfsuid(r7) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000080487d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f0000000180)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@user_xattr}]}, 0xfc, 0x480, &(0x7f0000000840)="$eJzs3MlvG1UYAPDP4zhNuoalQBcgbKJiadp0oQcuIJA4gIQEh8ItpGkV6lLUBIlWFSkIlSOqxB1xROIv4AQXBJyQuMIdVapQLi2LxKAZz7TO5sSJU7f17yc5em/m2fO+efPGb96ME0DPGs7+VCI2R8RvWTrJs9elRaGs3LXZ8+N/zZ4fr0SavvFnJV93dfb8eFm2fN/mIrMniUg+rcSuRbY7dfbcybF6feJMkR+ZPvX+yNTZc89Onho7MXFi4r3RI0cOHtj/3OHRQx2Jc0tW150fnd6945W3Lr02fvTSOz9901fWdV4cnTIcw3P2ZbMnOr2xLtvSlK70dbEitKUaEVlz1fL+vy2qcaPxtsXLn3S1csC6StM03br06gspcAerRLdrAHRH+UV/dXYwBtbpOvhWduWFxgVQFve14tVY0xdJUaY27/q2kwaKeZOjF/7+MvL9v6Gn9j8AcPN9l41/nmmMf8pXY81Q3NdUbms+H5wtjbgrIu6OiHsi4t6I2B6Rl70/Ih5oc/vD8/ILx5/J5VUFtkLZ+O/54t7W3PFfMfr7Lx2qFrktMRhDUascn6xP7Cv2yZ6obTg+WR9stY3vX/r186XWDRdjv/KVbb8cCxb1uNy3Ye57jo1Nj60p6CZXPs7nAGcWxn/jzlWW2hERO1fx+dm4efKpr3cvtX75+FvowH2m9KuIJxvtfyFaxD///mTZ4IdHD40MRH1i30h5VCz08y8XX19q+2uKvwOy9t+46PF/Pf6hSvP92qn2t3Hx98+WvKZp4/h/u1ySHf/9lTfzdH+x7MOx6ekz+yP6K68uXD5649PKfFn+yubtEY8t3v+zc1x2jGXx74qI7CB+MCIeioiHi7o/EhGPRv4Ri5m5FhE/vvj4u6uJP1lux3ZA1v7H5rR/LNP+7SeqJ3/4djXxN2TtfzBP7SmWrOT8t9IKrmXfAQAAwO0iyZ+BryR7r6eTZO/eiE353O7GpH56avrp46c/+OdY41n5oagl5UxXYz64MR+6v5gbLvOj8/IHinnjL6qDeX5jce8b6J5Nzf0/n3Bs9P/MH9UuVw5Yf36vBb1rFf2/5QMPwO3D9z/0rjb6v1MF3GFW2qnTda4HcPMt1v9nulAP4OYzqIfepf9D79L/oXfp/9CT1vK7follEjNt796BaFWm/xaJK09EkifSmS5W49/iMbSVFV6/+pT/LWP5wrWi390KLdg60b1zEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCf9HwAA///ztNvN") 1m2.466059914s ago: executing program 39 (id=3676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x100, 0x2, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) fstat(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) setfsuid(r7) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000080487d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f0000000180)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@user_xattr}]}, 0xfc, 0x480, &(0x7f0000000840)="$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") 9.41005429s ago: executing program 2 (id=4392): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 9.344997551s ago: executing program 2 (id=4393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.606148309s ago: executing program 2 (id=4407): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 7.58390998s ago: executing program 2 (id=4408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x1}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "003a04", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x27}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x40000, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd566]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x40, r8, 0x7, 0x70bd21, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xb}]}, 0x40}}, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x140) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) 7.53807666s ago: executing program 2 (id=4410): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 7.258230885s ago: executing program 2 (id=4417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffb, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {0xffff0001, 0x0, 0x0, 0xfffffffc, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x0, 0x40000000, 0x80000001}, {}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000000}, {0x4}, {0x4, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], [{0x4}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x2}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 7.257969925s ago: executing program 40 (id=4417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x1000000, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x200}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x10}, {0xfffffffd, 0x0, 0x0, 0x5, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffb, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xcb, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {0xffff0001, 0x0, 0x0, 0xfffffffc, 0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffb}, {}, {}, {0x0, 0x0, 0x40000000, 0x80000001}, {}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000000}, {0x4}, {0x4, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x200000}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xb}], [{0x4}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x2}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 5.389853524s ago: executing program 9 (id=4447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)=0x6e, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) 5.332677645s ago: executing program 0 (id=4448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d32000/0x1000)=nil, 0x1000, 0x12) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="06", 0x1) mlockall(0x2) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) 4.700815555s ago: executing program 4 (id=4453): r0 = syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080), 0x1, 0x500, &(0x7f0000001d40)="$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") pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, 0x0, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x20}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 4.019148627s ago: executing program 4 (id=4457): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) (async) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0xffff, 0x1}, {0x45, 0x2}, @const={0x62, {0x400, 0x5, 0x9, 0x101}}}) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000001280)=""/3, 0x3a, 0x3, 0x1, 0x10, 0x0, @void, @value}, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 3.924417168s ago: executing program 4 (id=4459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.870027918s ago: executing program 4 (id=4460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_io_uring_setup(0x3466, &(0x7f00000005c0)={0x0, 0x923b, 0x100, 0x1, 0x340}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000b80)=0x6, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) io_uring_enter(r3, 0x1d69, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x0, 0x7b, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xb}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 3.743801061s ago: executing program 9 (id=4461): creat(&(0x7f0000000200)='./file1\x00', 0x12e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x7, 0x80, 0x40, 0x1, {{0x9, 0x4, 0x1, 0x8, 0x24, 0x68, 0x0, 0xa, 0x4, 0x0, @multicast1, @private=0xa010101, {[@ssrr={0x89, 0xf, 0x3b, [@local, @remote, @multicast2]}]}}}}}) getresuid(0x0, &(0x7f0000000280), &(0x7f0000000240)) getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) readahead(0xffffffffffffffff, 0x101, 0x80000) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$cdc_ecm(0x6, 0x7f, &(0x7f0000000500)=ANY=[], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v', @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3.038925572s ago: executing program 9 (id=4463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) ioperm(0x5, 0x8004, 0xa) 3.001372722s ago: executing program 4 (id=4464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='file_check_and_advance_wb_err\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)={0x34, r2, 0x7, 0x70bd21, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xb}]}, 0x34}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x310) 2.952064053s ago: executing program 3 (id=4427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a"], 0x118}}, 0x0) 2.951724223s ago: executing program 9 (id=4466): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x10000, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) fcntl$setown(0xffffffffffffffff, 0x8, r2) tkill(r2, 0x13) 2.951371263s ago: executing program 3 (id=4467): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.913683024s ago: executing program 4 (id=4468): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x10000, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) fcntl$setown(0xffffffffffffffff, 0x8, r2) tkill(r2, 0x13) 2.908960744s ago: executing program 3 (id=4470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.866643275s ago: executing program 3 (id=4471): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) prlimit64(r0, 0x7, &(0x7f00000000c0)={0x7, 0xf8d2}, 0x0) 1.385953318s ago: executing program 0 (id=4476): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000a07000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x2, 0x3, 0xff) chdir(&(0x7f0000000140)='./file0\x00') getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000300)=0x3, 0x4) getpid() sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x6, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x13eb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002", @ANYRESHEX=r8], 0xc0}}, 0x8000) 1.320861449s ago: executing program 0 (id=4477): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) ioperm(0x5, 0x8004, 0xa) 1.25848603s ago: executing program 0 (id=4478): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a"], 0x118}}, 0x0) 1.25249717s ago: executing program 0 (id=4480): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async, rerun: 32) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) (async, rerun: 32) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) (async) getresuid(&(0x7f0000001ec0), 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf257a0000ae"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x40010) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12d) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x10, 0x0) (rerun: 32) 770.359018ms ago: executing program 0 (id=4485): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008400000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1404}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000580)={0x7, 0x1, 0x204, 0x8, 0xfffff000, 0x2, 0x6d5318e4, 0x62fd}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"a2e3ad2119c752f91b5e09091bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=\a']) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ff6697a4920008003950323030302e75"], 0x15) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@loose}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 185.723007ms ago: executing program 8 (id=4487): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 164.481717ms ago: executing program 8 (id=4488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) ioperm(0x5, 0x8004, 0xa) 118.984478ms ago: executing program 8 (id=4489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) listxattr(0x0, 0x0, 0x0) 117.271348ms ago: executing program 8 (id=4490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x3, 0xc, &(0x7f0000001880)=ANY=[@ANYBLOB="d3f49b84c66641acde0f33c657d9f334aad2093d87a9e75a00e2784f7aae095a53d702bf41618ddc6bdcd5a1eafd965478dd145d4d84bc8428ed038e2aeb38b57cc6b4b7c0c261d5", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000000000b7040000000000008500000057000000955901c5cb5a616cd7e208744bae7238c82574315828bdb3143f9129112c88a60e35a28138f7db976e4a3125646c6e564048247c2a85ec1afdb2c8b7d8b4ee7c9e0c8590ee2baac392b84c8cfa5d4d29e71cce0c2e4705bb91d95304e32af5136691e2b98a7ea35bcdac71ca1f081d0886ba0820ac6b26"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) unshare(0x20040400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00q'], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="a80100001900010000000000fbdbdf251d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb480c6c881a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d2"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) chmod(0x0, 0x23f) stat(0x0, &(0x7f0000001580)) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x8, 0x7, 0xa, 0x5}]}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7a}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 49.099159ms ago: executing program 8 (id=4491): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000006800090300000000000000000a00010000000000040004000800010001"], 0x24}}, 0x0) r3 = epoll_create(0xaf2) epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0xe000200f}) 40.73889ms ago: executing program 9 (id=4492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.40035ms ago: executing program 9 (id=4493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 8 (id=4494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) listen(r1, 0x6) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/197, 0xc5, 0x0, &(0x7f0000000480)=""/89, 0x59}, &(0x7f0000000540)=0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x8c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x7ff}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x9}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0x0, 0x1f, 0x3}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x4}, @IFLA_BR_PRIORITY={0xffffffffffffff0c, 0x6, 0xe}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}, @IFLA_NET_NS_FD={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x787f, 0x0, 0x4, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x8, 0x0, 0x1}) (async) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) kernel console output (not intermixed with test programs): comm kworker/u8:2: Failed to release dquot type 0 [ 304.816927][T19100] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 304.846321][T19100] EXT4-fs (loop9): 1 orphan inode deleted [ 304.867169][T19100] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.969225][T19128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19128 comm=syz.9.3965 [ 304.987011][T19125] netlink: 'syz.8.3977': attribute type 3 has an invalid length. [ 304.994875][T19125] netlink: 'syz.8.3977': attribute type 3 has an invalid length. [ 305.020354][T19125] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3977'. [ 305.029838][ T29] audit: type=1400 audit(19043806.531:14963): avc: denied { read } for pid=19098 comm="syz.9.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 305.092196][T16126] kernel write not supported for file bpf-prog (pid: 16126 comm: kworker/1:5) [ 305.167970][T17492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.272194][ T29] audit: type=1326 audit(19043806.804:14964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19139 comm="syz.4.3983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x0 [ 305.310592][T16126] tipc: Node number set to 2886997007 [ 305.575032][ T29] audit: type=1326 audit(19043807.130:14965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19145 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadb48d169 code=0x7ffc0000 [ 305.598546][ T29] audit: type=1326 audit(19043807.130:14966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19145 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcadb48d169 code=0x7ffc0000 [ 305.665482][ T29] audit: type=1326 audit(19043807.172:14967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19145 comm="syz.9.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcadb48d169 code=0x7ffc0000 [ 305.796672][T19146] loop9: detected capacity change from 0 to 512 [ 305.822716][T19146] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.847913][T19146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843e02c, mo2=0002] [ 305.884378][T19146] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3986: invalid indirect mapped block 2683928664 (level 1) [ 305.981534][T19146] EXT4-fs (loop9): Remounting filesystem read-only [ 306.016648][T19146] EXT4-fs (loop9): 1 truncate cleaned up [ 306.035567][T19146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.095528][T19146] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 306.108960][T19146] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.117127][T19157] loop4: detected capacity change from 0 to 128 [ 306.125868][T19151] loop8: detected capacity change from 0 to 1024 [ 306.179759][T19151] EXT4-fs: Ignoring removed bh option [ 306.262606][T19166] loop9: detected capacity change from 0 to 512 [ 306.279675][T19151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.349708][T19166] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.380269][T19151] EXT4-fs error (device loop8): __ext4_remount:6738: comm syz.8.3988: Abort forced by user [ 306.415433][T19166] tipc: Enabling of bearer rejected, already enabled [ 306.434032][T19151] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 306.500226][T19180] loop4: detected capacity change from 0 to 2048 [ 306.537957][T19166] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3994: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 306.580112][T19166] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 306.586264][T19180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.602664][T19166] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3994: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 306.612035][T19185] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3994: bg 0: block 18: invalid block bitmap [ 306.635141][T19166] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 306.644428][T19166] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.3994: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 306.666098][T19166] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 306.688905][T19166] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3994: Failed to acquire dquot type 1 [ 306.735383][T17285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.798395][T19191] loop2: detected capacity change from 0 to 1024 [ 306.829235][T17492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.861954][T19191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.893283][T19191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.028628][T19199] xt_hashlimit: max too large, truncated to 1048576 [ 307.738748][T19215] loop2: detected capacity change from 0 to 1764 [ 307.831388][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 307.831406][ T29] audit: type=1400 audit(19043809.471:15193): avc: denied { name_connect } for pid=19213 comm="syz.2.4008" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 307.925675][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.087237][T19218] loop2: detected capacity change from 0 to 128 [ 308.164812][T19218] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 308.386853][T17940] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.467417][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4011'. [ 308.526847][T19223] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 308.636667][T19223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4011'. [ 308.649766][T19232] netlink: 'syz.9.4015': attribute type 3 has an invalid length. [ 308.657601][T19232] netlink: 'syz.9.4015': attribute type 3 has an invalid length. [ 308.700860][T19230] loop2: detected capacity change from 0 to 128 [ 308.722039][T19232] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4015'. [ 308.789557][T19232] 9pnet_fd: Insufficient options for proto=fd [ 308.874192][T19242] loop2: detected capacity change from 0 to 128 [ 308.888736][T19243] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 308.918101][T19242] vfat: Unknown parameter 'ÿÿ' [ 308.946380][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4016'. [ 308.955319][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4016'. [ 309.001932][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4016'. [ 309.078680][ T29] audit: type=1326 audit(19043810.794:15194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.102249][ T29] audit: type=1326 audit(19043810.794:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.125797][ T29] audit: type=1326 audit(19043810.794:15196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.149362][ T29] audit: type=1326 audit(19043810.794:15197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.172847][ T29] audit: type=1326 audit(19043810.794:15198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.196356][ T29] audit: type=1326 audit(19043810.794:15199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.219817][ T29] audit: type=1326 audit(19043810.794:15200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.243898][ T29] audit: type=1326 audit(19043810.794:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.267484][ T29] audit: type=1326 audit(19043810.794:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19235 comm="syz.4.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 309.644491][T19263] tipc: Started in network mode [ 309.649484][T19263] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 309.701301][T19263] tipc: Enabled bearer , priority 10 [ 309.947082][T19277] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4020'. [ 310.232573][T19273] loop8: detected capacity change from 0 to 2048 [ 310.293880][T19273] loop8: p3 p4 < > [ 310.325564][T19295] netlink: 'syz.2.4022': attribute type 3 has an invalid length. [ 310.333444][T19295] netlink: 'syz.2.4022': attribute type 3 has an invalid length. [ 310.386890][T19295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4022'. [ 310.466467][T19301] 9pnet_fd: Insufficient options for proto=fd [ 310.594397][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4023'. [ 310.657236][ T3363] tipc: Node number set to 4269801502 [ 310.918399][T19319] loop7: detected capacity change from 2048 to 2047 [ 311.197295][T19344] loop8: detected capacity change from 0 to 512 [ 311.311299][T19344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.416852][T19344] tipc: Enabling of bearer rejected, already enabled [ 311.565697][T19371] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4027: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 311.583445][T19374] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4029'. [ 311.592541][T19374] bond_slave_0: entered promiscuous mode [ 311.598299][T19374] bond_slave_1: entered promiscuous mode [ 311.648860][T19371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 311.664564][T19377] loop4: detected capacity change from 0 to 1024 [ 311.685192][T19371] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4027: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 311.698813][T19344] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4027: bg 0: block 18: invalid block bitmap [ 311.747524][T19377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.760413][T19371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 311.782992][T19377] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.830920][T19371] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4027: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 311.891928][T19384] veth0_to_batadv: entered promiscuous mode [ 311.933300][T19371] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 311.943297][T19384] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 311.958118][T19371] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4027: Failed to acquire dquot type 1 [ 312.105031][T17285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.204612][T19390] loop2: detected capacity change from 0 to 512 [ 312.284973][T19388] random: crng reseeded on system resumption [ 312.430267][T19390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.528188][T19390] tipc: Enabling of bearer rejected, already enabled [ 312.609791][T19397] serio: Serial port ptm0 [ 312.655379][T19399] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4034: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 312.668322][T19400] netlink: 'syz.9.4036': attribute type 3 has an invalid length. [ 312.679653][T19400] netlink: 'syz.9.4036': attribute type 3 has an invalid length. [ 312.714294][T16126] kernel write not supported for file bpf-prog (pid: 16126 comm: kworker/1:5) [ 312.760989][T19399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 312.771303][T19399] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4034: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 312.821750][T19399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 312.823387][T19390] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4034: bg 0: block 18: invalid block bitmap [ 312.853524][T19399] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4034: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 312.901157][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 312.901177][ T29] audit: type=1326 audit(19043814.814:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 312.916158][T19399] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 312.979053][ T29] audit: type=1326 audit(19043814.814:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 313.002672][ T29] audit: type=1326 audit(19043814.814:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 313.026405][ T29] audit: type=1326 audit(19043814.814:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f23cb56d1a3 code=0x7ffc0000 [ 313.050097][ T29] audit: type=1326 audit(19043814.814:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 313.073638][ T29] audit: type=1326 audit(19043814.814:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 313.086121][T19399] Quota error (device loop2): write_blk: dquota write failed [ 313.097134][ T29] audit: type=1326 audit(19043814.814:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 313.097167][ T29] audit: type=1326 audit(19043814.814:15223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.4.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cb56d169 code=0x7ffc0000 [ 313.141537][T19399] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 313.216614][T19399] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4034: Failed to acquire dquot type 1 [ 313.256738][T17940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.291894][T19417] __nla_validate_parse: 3 callbacks suppressed [ 313.291915][T19417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4044'. [ 313.307174][T19417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4044'. [ 313.381758][T19425] loop4: detected capacity change from 0 to 1024 [ 313.391186][T19422] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 313.398467][T19425] EXT4-fs: Ignoring removed nobh option [ 313.405915][T19425] EXT4-fs: inline encryption not supported [ 313.411779][T19425] EXT4-fs: Ignoring removed bh option [ 313.414578][T19422] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 313.425682][T19422] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 313.444918][T19422] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 313.458859][T19425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.520792][T19433] random: crng reseeded on system resumption [ 313.585128][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.620609][T19442] netlink: 'syz.4.4050': attribute type 3 has an invalid length. [ 313.628545][T19442] netlink: 'syz.4.4050': attribute type 3 has an invalid length. [ 313.628737][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4050'. [ 313.631605][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 313.696709][T19448] loop0: detected capacity change from 0 to 512 [ 313.745106][T19448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.760178][T19456] netlink: 268 bytes leftover after parsing attributes in process `syz.8.4056'. [ 313.771849][T19448] tipc: Enabled bearer , priority 10 [ 313.810837][T19465] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 313.836437][T19465] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 313.845416][T19465] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 313.859695][T19468] hub 9-0:1.0: USB hub found [ 313.869296][T19468] hub 9-0:1.0: 8 ports detected [ 313.879200][T19448] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4053: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 313.901185][T19465] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 313.911260][T19448] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 313.971465][T19448] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4053: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 313.991205][T19471] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4053: bg 0: block 18: invalid block bitmap [ 314.008536][T19448] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 314.032202][T19448] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4053: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 314.075918][T19448] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 314.098607][T19448] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4053: Failed to acquire dquot type 1 [ 314.164691][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.234124][T19492] xt_hashlimit: max too large, truncated to 1048576 [ 314.356969][T19496] loop0: detected capacity change from 0 to 1024 [ 314.373693][T19496] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 314.408365][T19496] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4070: Invalid block bitmap block 0 in block_group 0 [ 314.432934][T19496] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4070: Failed to acquire dquot type 0 [ 314.453277][T19496] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.4070: Freeing blocks not in datazone - block = 0, count = 4096 [ 314.483469][T19496] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4070: Invalid inode bitmap blk 0 in block_group 0 [ 314.498712][T19496] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 314.509683][ T4079] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:9: Failed to release dquot type 0 [ 314.521389][T19496] EXT4-fs (loop0): 1 orphan inode deleted [ 314.529628][T19496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.619888][T19498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19498 comm=syz.0.4070 [ 314.663526][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.992505][T19512] serio: Serial port ptm0 [ 315.125821][T19522] loop0: detected capacity change from 0 to 1024 [ 315.159580][T19522] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.207836][T19522] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4081: Invalid block bitmap block 0 in block_group 0 [ 315.256696][T19522] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4081: Failed to acquire dquot type 0 [ 315.302234][T19522] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.4081: Freeing blocks not in datazone - block = 0, count = 4096 [ 315.369802][T19522] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4081: Invalid inode bitmap blk 0 in block_group 0 [ 315.392552][T19531] loop9: detected capacity change from 0 to 128 [ 315.399336][T19522] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 315.408147][ T4092] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:14: Failed to release dquot type 0 [ 315.418251][T19522] EXT4-fs (loop0): 1 orphan inode deleted [ 315.445366][T19522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.526460][T19535] xt_hashlimit: max too large, truncated to 1048576 [ 315.579552][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.657438][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.657438][ T4099] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 315.676429][T19540] hub 4-0:1.0: USB hub found [ 315.677164][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.677164][ T4099] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 315.696232][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.696232][ T4099] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 315.700101][T19540] hub 4-0:1.0: 8 ports detected [ 315.710568][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.710568][ T4099] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 315.729277][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.729277][ T4099] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 315.746380][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.746380][ T4099] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 315.763540][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.763540][ T4099] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 315.781237][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.781237][ T4099] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 315.801050][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.801050][ T4099] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 315.820478][ T4099] kworker/u8:20: attempt to access beyond end of device [ 315.820478][ T4099] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 315.891478][T19548] random: crng reseeded on system resumption [ 316.052638][T19565] loop9: detected capacity change from 0 to 512 [ 316.085871][T19565] EXT4-fs: Ignoring removed nobh option [ 316.135024][T19565] EXT4-fs error (device loop9): ext4_do_update_inode:5158: inode #16: comm syz.9.4098: corrupted inode contents [ 316.176838][T19565] EXT4-fs (loop9): Remounting filesystem read-only [ 316.193746][T19565] EXT4-fs (loop9): 1 truncate cleaned up [ 316.199727][T19576] loop8: detected capacity change from 0 to 512 [ 316.203712][T19565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.222759][ T4092] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 316.233542][ T4092] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 316.238575][T19565] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 316.269587][T19565] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.306339][ T4092] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 316.327087][T19576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.361273][T19576] tipc: Enabling of bearer rejected, already enabled [ 316.461586][T19581] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4101: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 316.498978][T19581] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 316.520416][T19581] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4101: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 316.525026][T19576] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4101: bg 0: block 18: invalid block bitmap [ 316.589648][T19581] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 316.604096][T19581] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4101: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 316.623708][T19584] FAULT_INJECTION: forcing a failure. [ 316.623708][T19584] name failslab, interval 1, probability 0, space 0, times 0 [ 316.636399][T19584] CPU: 0 UID: 0 PID: 19584 Comm: syz.0.4103 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 316.636426][T19584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.636438][T19584] Call Trace: [ 316.636445][T19584] [ 316.636457][T19584] dump_stack_lvl+0xf6/0x150 [ 316.636484][T19584] dump_stack+0x15/0x1a [ 316.636503][T19584] should_fail_ex+0x261/0x270 [ 316.636532][T19584] should_failslab+0x8f/0xb0 [ 316.636555][T19584] kmem_cache_alloc_noprof+0x59/0x340 [ 316.636582][T19584] ? vm_area_dup+0x2c/0x130 [ 316.636603][T19584] vm_area_dup+0x2c/0x130 [ 316.636625][T19584] __split_vma+0xfd/0x6a0 [ 316.636660][T19584] vms_gather_munmap_vmas+0x171/0x7a0 [ 316.636687][T19584] ? mas_walk+0x204/0x320 [ 316.636715][T19584] mmap_region+0x46f/0x1630 [ 316.636747][T19584] ? mntput+0x49/0x70 [ 316.636779][T19584] ? terminate_walk+0x271/0x290 [ 316.636817][T19584] do_mmap+0x9ef/0xc80 [ 316.636842][T19584] vm_mmap_pgoff+0x16d/0x2d0 [ 316.636869][T19584] ksys_mmap_pgoff+0x28a/0x340 [ 316.636888][T19584] x64_sys_call+0x1945/0x2e10 [ 316.636907][T19584] do_syscall_64+0xc9/0x1c0 [ 316.636931][T19584] ? clear_bhb_loop+0x25/0x80 [ 316.636957][T19584] ? clear_bhb_loop+0x25/0x80 [ 316.636983][T19584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.637006][T19584] RIP: 0033:0x7f4960f9d169 [ 316.637024][T19584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.637045][T19584] RSP: 002b:00007f495f5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.637066][T19584] RAX: ffffffffffffffda RBX: 00007f49611b5fa0 RCX: 00007f4960f9d169 [ 316.637080][T19584] RDX: 0000000000000002 RSI: 0000000000c00000 RDI: 0000200000001000 [ 316.637094][T19584] RBP: 00007f495f5ff090 R08: 0000000000000005 R09: 00000000ffffd000 [ 316.637106][T19584] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 316.637117][T19584] R13: 0000000000000000 R14: 00007f49611b5fa0 R15: 00007fff368dcd88 [ 316.637136][T19584] [ 316.709297][T19581] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 316.865484][T19581] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4101: Failed to acquire dquot type 1 [ 316.895851][T19589] program syz.0.4105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.918833][T19589] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 316.939795][T17285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.158825][T19602] netlink: 'syz.8.4111': attribute type 3 has an invalid length. [ 317.166736][T19602] netlink: 'syz.8.4111': attribute type 3 has an invalid length. [ 317.210955][ T3377] kernel write not supported for file bpf-prog (pid: 3377 comm: kworker/0:4) [ 317.233922][T19604] ------------[ cut here ]------------ [ 317.239496][T19604] WARNING: CPU: 1 PID: 19604 at mm/page_alloc.c:4716 __alloc_frozen_pages_noprof+0x71/0x340 [ 317.249689][T19604] Modules linked in: [ 317.253811][T19604] CPU: 1 UID: 0 PID: 19604 Comm: syz.0.4110 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 317.266134][T19604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.276267][T19604] RIP: 0010:__alloc_frozen_pages_noprof+0x71/0x340 [ 317.282961][T19604] Code: 00 20 00 00 75 0f 41 83 fd 0b 72 09 f6 05 1f 65 50 05 01 74 0d 41 83 fd 0a 76 18 31 ed e9 85 01 00 00 c6 05 09 65 50 05 01 90 <0f> 0b 90 41 83 fd 0a 77 e8 23 1d 90 5c 54 05 65 4c 8b 24 25 08 e0 [ 317.303023][T19604] RSP: 0018:ffffc9000195b9b0 EFLAGS: 00010246 [ 317.309484][T19604] RAX: 6a7d83b6237b8500 RBX: 0000000000040dc0 RCX: ffffffff88dbe020 [ 317.317593][T19604] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 317.325901][T19604] RBP: 0000000000040dc0 R08: ffffffff81ce53be R09: 0000000000000000 [ 317.333928][T19604] R10: ffff88810a8cf738 R11: 000188810a8cf748 R12: ffffffff88dbe020 [ 317.342162][T19604] R13: 0000000000000016 R14: 0000000000000000 R15: 0000000000000000 [ 317.350217][T19604] FS: 00007f495f5ff6c0(0000) GS:ffff8882aef56000(0000) knlGS:0000000000000000 [ 317.359368][T19604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.366005][T19604] CR2: 0000200000001000 CR3: 000000010aade000 CR4: 00000000003506f0 [ 317.374061][T19604] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.382087][T19604] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 317.390125][T19604] Call Trace: [ 317.393428][T19604] [ 317.396510][T19604] ? __warn+0x141/0x350 [ 317.400702][T19604] ? report_bug+0x318/0x420 [ 317.405326][T19604] ? __alloc_frozen_pages_noprof+0x71/0x340 [ 317.407949][T19614] vhci_hcd: default hub control req: 1f03 v0014 i0002 l0 [ 317.411308][T19604] ? __alloc_frozen_pages_noprof+0x71/0x340 [ 317.424390][T19604] ? __alloc_frozen_pages_noprof+0x73/0x340 [ 317.430430][T19604] ? handle_bug+0x89/0x170 [ 317.434907][T19604] ? exc_invalid_op+0x1a/0x50 [ 317.439606][T19604] ? asm_exc_invalid_op+0x1a/0x20 [ 317.444716][T19604] ? hashtab_init+0x4e/0xf0 [ 317.449265][T19604] ? __alloc_frozen_pages_noprof+0x71/0x340 [ 317.455234][T19604] ? should_failslab+0x8f/0xb0 [ 317.460104][T19604] __alloc_pages_noprof+0x9/0x20 [ 317.465172][T19604] ___kmalloc_large_node+0x83/0x130 [ 317.470421][T19604] __kmalloc_large_node_noprof+0x17/0xa0 [ 317.476292][T19604] __kmalloc_noprof+0x2bb/0x410 [ 317.481223][T19604] ? hashtab_init+0x82/0xf0 [ 317.485744][T19604] hashtab_init+0x82/0xf0 [ 317.490224][T19604] symtab_init+0x2a/0x40 [ 317.494546][T19604] class_read+0x14b/0x700 [ 317.499065][T19604] ? hashtab_init+0xa3/0xf0 [ 317.503651][T19604] ? __pfx_class_read+0x10/0x10 [ 317.508656][T19604] policydb_read+0x64d/0x1350 [ 317.513466][T19604] security_load_policy+0xc1/0x8d0 [ 317.518654][T19604] ? rep_movs_alternative+0x4a/0x70 [ 317.523992][T19604] sel_write_load+0x1f7/0x3c0 [ 317.528844][T19604] ? __pfx_sel_write_load+0x10/0x10 [ 317.534502][T19604] vfs_write+0x295/0x950 [ 317.538889][T19604] ? do_futex+0x279/0x370 [ 317.543254][T19604] ? __fget_files+0x186/0x1c0 [ 317.548069][T19604] ksys_write+0xeb/0x1b0 [ 317.552373][T19604] __x64_sys_write+0x42/0x50 [ 317.557016][T19604] x64_sys_call+0x2a45/0x2e10 [ 317.561756][T19604] do_syscall_64+0xc9/0x1c0 [ 317.566274][T19604] ? clear_bhb_loop+0x25/0x80 [ 317.571090][T19604] ? clear_bhb_loop+0x25/0x80 [ 317.575800][T19604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.581859][T19604] RIP: 0033:0x7f4960f9d169 [ 317.586311][T19604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.606072][T19604] RSP: 002b:00007f495f5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.614837][T19604] RAX: ffffffffffffffda RBX: 00007f49611b5fa0 RCX: 00007f4960f9d169 [ 317.622989][T19604] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 317.631076][T19604] RBP: 00007f496101e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 317.639140][T19604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.647162][T19604] R13: 0000000000000000 R14: 00007f49611b5fa0 R15: 00007fff368dcd88 [ 317.655362][T19604] [ 317.658481][T19604] ---[ end trace 0000000000000000 ]--- [ 317.664870][T19604] SELinux: failed to load policy [ 317.751274][T19620] loop0: detected capacity change from 0 to 512 [ 317.775641][T19622] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 317.800012][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 317.800010][T19620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.800030][ T29] audit: type=1326 audit(19043819.958:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 317.813115][T19620] tipc: Enabling of bearer rejected, already enabled [ 317.818705][ T29] audit: type=1326 audit(19043819.958:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 317.896930][ T29] audit: type=1326 audit(19043820.011:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 317.920014][ T29] audit: type=1326 audit(19043820.011:15568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 317.943308][ T29] audit: type=1326 audit(19043820.011:15569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 317.966179][ T29] audit: type=1326 audit(19043820.011:15570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 317.989215][ T29] audit: type=1326 audit(19043820.011:15571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 318.012078][ T29] audit: type=1326 audit(19043820.011:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 318.027285][T19629] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 318.034951][ T29] audit: type=1326 audit(19043820.011:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 318.074128][ T29] audit: type=1326 audit(19043820.011:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19621 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 318.113625][T19629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 318.135700][T19631] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4116: bg 0: block 18: invalid block bitmap [ 318.152495][T19629] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 318.172889][T19629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 318.182086][T19629] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4116: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 318.203454][T19629] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 318.213078][T19629] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4116: Failed to acquire dquot type 1 [ 318.215339][T19638] loop8: detected capacity change from 0 to 512 [ 318.235206][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 318.259224][T19642] netlink: 'syz.9.4124': attribute type 3 has an invalid length. [ 318.267070][T19642] netlink: 'syz.9.4124': attribute type 3 has an invalid length. [ 318.280531][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.293967][T19638] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 318.305658][T19638] EXT4-fs (loop8): 1 truncate cleaned up [ 318.306025][T19642] __nla_validate_parse: 12 callbacks suppressed [ 318.306041][T19642] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4124'. [ 318.318312][T19638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.369718][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/1:3) [ 318.412620][T19648] loop0: detected capacity change from 0 to 512 [ 318.436749][T19648] EXT4-fs: Ignoring removed nobh option [ 318.500840][T19648] EXT4-fs error (device loop0): ext4_do_update_inode:5158: inode #16: comm syz.0.4125: corrupted inode contents [ 318.533808][T19648] EXT4-fs (loop0): Remounting filesystem read-only [ 318.547758][T19648] EXT4-fs (loop0): 1 truncate cleaned up [ 318.557701][T19648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.571657][T19648] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 318.571680][ T4079] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 318.571704][ T4079] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 318.571770][ T4079] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 318.578726][T19648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.619856][T19658] loop9: detected capacity change from 0 to 128 [ 318.637982][T17285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.647985][T19658] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.724438][T19663] geneve2: entered promiscuous mode [ 318.729758][T19663] geneve2: entered allmulticast mode [ 318.768029][T19666] loop0: detected capacity change from 0 to 512 [ 318.831815][T19666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.850055][T17492] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.853590][T19666] tipc: Enabling of bearer rejected, already enabled [ 318.904248][T19663] loop2: detected capacity change from 0 to 512 [ 318.946850][T19676] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4132: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 318.984965][T19676] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 319.017883][T19676] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4132: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 319.018421][T19663] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 319.053123][T19666] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4132: bg 0: block 18: invalid block bitmap [ 319.075553][T19676] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 319.075766][T19680] loop9: detected capacity change from 0 to 512 [ 319.093490][T19663] EXT4-fs (loop2): orphan cleanup on readonly fs [ 319.117039][T19676] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4132: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 319.136620][T19663] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.150594][T19680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.161784][T19676] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 319.181982][T19680] tipc: Enabling of bearer rejected, already enabled [ 319.190895][T19663] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 319.204424][T19676] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4132: Failed to acquire dquot type 1 [ 319.219833][T19663] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4131: bg 0: block 40: padding at end of block bitmap is not set [ 319.271925][T19683] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.4135: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 319.301965][T19663] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 319.327611][T19663] EXT4-fs (loop2): 1 truncate cleaned up [ 319.332022][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.338715][T19663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.359331][T19683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 319.374084][T19683] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.4135: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 319.394185][T19680] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4135: bg 0: block 18: invalid block bitmap [ 319.422956][T19683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 319.437072][T19683] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.4135: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 319.502205][T19683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 319.533656][T19683] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.4135: Failed to acquire dquot type 1 [ 319.589997][T17492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.608215][T17940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.644770][T19694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4138'. [ 319.745784][T19703] loop2: detected capacity change from 0 to 512 [ 319.763111][T19703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.800562][T19703] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 319.808620][T19703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 319.832003][T19703] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 319.841615][T19703] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 319.866888][T19703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 319.871498][T19710] loop0: detected capacity change from 0 to 512 [ 319.931574][T19710] EXT4-fs: Ignoring removed orlov option [ 319.949794][T19710] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.984276][T19710] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.4145: casefold flag without casefold feature [ 320.028306][T19710] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.4145: couldn't read orphan inode 15 (err -117) [ 320.068080][T19710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.150933][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.376942][T19729] xt_hashlimit: max too large, truncated to 1048576 [ 320.467796][T17940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.702533][T19759] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 320.729727][T19759] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 320.737271][T19761] loop4: detected capacity change from 0 to 512 [ 320.738014][T19759] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 320.767582][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4166'. [ 320.769123][T19761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.799820][T19759] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 320.839711][T19761] tipc: Enabling of bearer rejected, already enabled [ 320.904093][T19773] loop0: detected capacity change from 0 to 512 [ 320.928019][T19761] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4163: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 320.928223][T19761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 320.928256][T19761] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4163: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 320.928398][T19761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 320.928499][T19761] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4163: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 321.016656][T19775] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4163: bg 0: block 18: invalid block bitmap [ 321.038557][T19773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.066139][T19773] tipc: Enabling of bearer rejected, already enabled [ 321.077302][T19761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 321.096536][T19761] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4163: Failed to acquire dquot type 1 [ 321.136378][T19779] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4168: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 321.172954][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.210972][T19779] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 321.227156][T19779] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4168: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 321.235176][T19773] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4168: bg 0: block 18: invalid block bitmap [ 321.250022][T19779] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 321.287626][T19779] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4168: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 321.308515][T19779] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 321.320351][T19779] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4168: Failed to acquire dquot type 1 [ 321.375365][T19795] loop9: detected capacity change from 0 to 1024 [ 321.391918][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.394776][T19797] random: crng reseeded on system resumption [ 321.409882][T19795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.434624][T19795] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.504513][T19806] loop0: detected capacity change from 0 to 512 [ 321.514240][T19806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4180'. [ 321.516338][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4182'. [ 321.532370][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4182'. [ 321.562558][T19812] loop2: detected capacity change from 0 to 164 [ 321.571519][T19812] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 321.581188][T19812] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 321.596716][T19812] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4183'. [ 321.691199][T19826] loop2: detected capacity change from 0 to 164 [ 321.699221][T19826] Unable to read rock-ridge attributes [ 321.705782][T19828] random: crng reseeded on system resumption [ 321.764715][T19830] loop8: detected capacity change from 0 to 164 [ 321.843801][T19836] tipc: Enabling of bearer rejected, already enabled [ 321.857748][T19838] bio_check_eod: 102 callbacks suppressed [ 321.857769][T19838] syz.8.4192: attempt to access beyond end of device [ 321.857769][T19838] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 321.857808][T19838] syz.8.4192: attempt to access beyond end of device [ 321.857808][T19838] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 321.878832][T19838] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 321.939472][T19840] loop2: detected capacity change from 0 to 512 [ 322.063897][T19847] loop2: detected capacity change from 0 to 1024 [ 322.066264][T19847] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.077769][T19847] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4199: Invalid block bitmap block 0 in block_group 0 [ 322.188104][T19855] xt_hashlimit: max too large, truncated to 1048576 [ 322.200990][T19847] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4199: Failed to acquire dquot type 0 [ 322.201361][T19847] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.4199: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.201554][T19847] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4199: Invalid inode bitmap blk 0 in block_group 0 [ 322.201666][T19847] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 322.201795][T19847] EXT4-fs (loop2): 1 orphan inode deleted [ 322.202351][T19847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.226930][ T4099] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:20: Failed to release dquot type 0 [ 322.270142][T19861] sd 0:0:1:0: device reset [ 322.292406][T19862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19862 comm=syz.2.4199 [ 322.310407][T17940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.432865][T19866] loop2: detected capacity change from 0 to 1024 [ 322.447690][T19866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.448264][T19866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.453697][T19868] netlink: 'syz.9.4208': attribute type 1 has an invalid length. [ 322.484405][T19866] bridge0: port 3(syz_tun) entered blocking state [ 322.490984][T19866] bridge0: port 3(syz_tun) entered disabled state [ 322.518456][T19866] syz_tun: entered allmulticast mode [ 322.519189][T19866] syz_tun: entered promiscuous mode [ 322.525086][T19866] bridge0: port 3(syz_tun) entered blocking state [ 322.525194][T19866] bridge0: port 3(syz_tun) entered forwarding state [ 322.617342][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 322.617361][ T29] audit: type=1326 audit(19043825.018:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 322.650718][T19876] loop8: detected capacity change from 0 to 164 [ 322.682897][T19876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.692950][T19876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 322.710213][ T29] audit: type=1326 audit(19043825.050:15953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 322.733738][ T29] audit: type=1326 audit(19043825.050:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f119215d1a3 code=0x7ffc0000 [ 322.757033][ T29] audit: type=1326 audit(19043825.050:15955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f119215bc1f code=0x7ffc0000 [ 322.780284][ T29] audit: type=1326 audit(19043825.050:15956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f119215d1f7 code=0x7ffc0000 [ 322.803786][ T29] audit: type=1326 audit(19043825.050:15957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119215bad0 code=0x7ffc0000 [ 322.827344][ T29] audit: type=1326 audit(19043825.050:15958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f119215cd6b code=0x7ffc0000 [ 322.850776][ T29] audit: type=1326 audit(19043825.071:15959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f119215bdca code=0x7ffc0000 [ 322.874035][ T29] audit: type=1326 audit(19043825.071:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f119215bdca code=0x7ffc0000 [ 322.897328][ T29] audit: type=1326 audit(19043825.071:15961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19875 comm="syz.8.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f119215b9d7 code=0x7ffc0000 [ 323.076580][T19893] loop0: detected capacity change from 0 to 2048 [ 323.089971][T19894] loop4: detected capacity change from 0 to 1024 [ 323.111688][T19894] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.138974][T19894] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4217: Invalid block bitmap block 0 in block_group 0 [ 323.156939][T19894] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4217: Failed to acquire dquot type 0 [ 323.173633][T19893] Alternate GPT is invalid, using primary GPT. [ 323.180049][T19893] loop0: p1 p2 p3 [ 323.186728][T19902] __nla_validate_parse: 3 callbacks suppressed [ 323.192994][T19902] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4221'. [ 323.202322][T19894] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4217: Freeing blocks not in datazone - block = 0, count = 4096 [ 323.218820][T19894] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4217: Invalid inode bitmap blk 0 in block_group 0 [ 323.262212][T19894] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 323.270933][ T4092] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:14: Failed to release dquot type 0 [ 323.291848][T19907] vcan0: entered allmulticast mode [ 323.299091][T19894] EXT4-fs (loop4): 1 orphan inode deleted [ 323.311069][T19907] vcan0: left allmulticast mode [ 323.325867][T19894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.352612][T19893] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 323.370336][T19904] loop9: detected capacity change from 0 to 512 [ 323.402697][T19904] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 323.402791][T19920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19920 comm=syz.4.4217 [ 323.420466][T19904] EXT4-fs (loop9): orphan cleanup on readonly fs [ 323.432124][T19904] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.450962][T19904] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 323.459015][T19904] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4222: bg 0: block 40: padding at end of block bitmap is not set [ 323.920725][T19904] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 323.937478][T19904] EXT4-fs (loop9): 1 truncate cleaned up [ 323.944253][T19904] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.036775][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4228'. [ 324.138621][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.165490][T17492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.186833][ T51] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 324.323796][T19941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.337162][T19941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.467565][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/1:3) [ 324.516804][T19955] xt_hashlimit: max too large, truncated to 1048576 [ 324.570352][T19961] loop4: detected capacity change from 0 to 1024 [ 324.579202][T19960] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 324.587845][T19960] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 324.596789][T19961] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.599980][T19960] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 324.625207][T19961] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4242: Invalid block bitmap block 0 in block_group 0 [ 324.652565][T19961] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4242: Failed to acquire dquot type 0 [ 324.668247][T19961] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4242: Freeing blocks not in datazone - block = 0, count = 4096 [ 324.682959][T19961] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4242: Invalid inode bitmap blk 0 in block_group 0 [ 324.695830][T19961] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 324.704891][T19961] EXT4-fs (loop4): 1 orphan inode deleted [ 324.705153][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 324.711162][T19961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.733499][T19968] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 324.743053][T19968] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 324.757179][T19968] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 324.802679][T19973] loop2: detected capacity change from 0 to 512 [ 324.819072][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/1:3) [ 324.828688][T19961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19961 comm=+}[@ [ 324.842575][T19973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.883345][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.927098][T19973] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4247: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 324.947344][T19973] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 324.957445][T19973] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4247: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 324.977453][T19973] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 324.977561][T19987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4247: bg 0: block 18: invalid block bitmap [ 324.994594][T19973] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.4247: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.015949][T19989] loop9: detected capacity change from 0 to 512 [ 325.028657][T19973] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 325.041179][T19973] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4247: Failed to acquire dquot type 1 [ 325.055965][T19989] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.075007][T19989] tipc: Enabling of bearer rejected, already enabled [ 325.096401][T19999] loop4: detected capacity change from 0 to 512 [ 325.109517][T17940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.122477][T19999] EXT4-fs: Ignoring removed oldalloc option [ 325.133075][T19989] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.4254: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.154778][T19989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 325.163967][T19989] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.4254: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.182072][T19989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 325.182129][T19999] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4257: Parent and EA inode have the same ino 15 [ 325.196588][T19989] EXT4-fs error (device loop9): ext4_xattr_block_get:596: inode #15: comm syz.9.4254: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.208103][T20006] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4254: bg 0: block 18: invalid block bitmap [ 325.225835][T19989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 325.237423][T19999] EXT4-fs (loop4): Remounting filesystem read-only [ 325.242477][T19989] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.4254: Failed to acquire dquot type 1 [ 325.248068][T19999] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 325.251627][T19999] EXT4-fs (loop4): 1 orphan inode deleted [ 325.291724][T19999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.304031][T19999] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 325.311061][T19999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.313939][T17492] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.351508][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 325.377614][T20012] loop2: detected capacity change from 0 to 1024 [ 325.400961][T20012] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.413610][T20012] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4262: Invalid block bitmap block 0 in block_group 0 [ 325.427759][T20012] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4262: Failed to acquire dquot type 0 [ 325.440620][T20012] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.4262: Freeing blocks not in datazone - block = 0, count = 4096 [ 325.465413][T20012] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.4262: Invalid inode bitmap blk 0 in block_group 0 [ 325.482451][ T4092] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:14: Failed to release dquot type 0 [ 325.495591][T20012] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 325.504517][T20012] EXT4-fs (loop2): 1 orphan inode deleted [ 325.510614][T20012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.523422][T20027] loop4: detected capacity change from 0 to 512 [ 325.556717][T20027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.587992][T20034] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20034 comm=syz.2.4262 [ 325.623333][T20027] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4269: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.651548][T20027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 325.660665][T20027] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4269: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.679587][T20027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 325.679847][T17940] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.692673][T20037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4269: bg 0: block 18: invalid block bitmap [ 325.710633][T20027] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4269: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 325.734369][T20027] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 325.750925][T20027] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4269: Failed to acquire dquot type 1 [ 325.774729][T20041] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4273'. [ 325.790637][T20041] batadv1: entered allmulticast mode [ 325.802058][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.862568][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 325.871261][T20043] FAULT_INJECTION: forcing a failure. [ 325.871261][T20043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.884405][T20043] CPU: 1 UID: 0 PID: 20043 Comm: syz.0.4274 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 325.884444][T20043] Tainted: [W]=WARN [ 325.884451][T20043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.884465][T20043] Call Trace: [ 325.884472][T20043] [ 325.884480][T20043] dump_stack_lvl+0xf6/0x150 [ 325.884526][T20043] dump_stack+0x15/0x1a [ 325.884561][T20043] should_fail_ex+0x261/0x270 [ 325.884650][T20043] should_fail+0xb/0x10 [ 325.884669][T20043] should_fail_usercopy+0x1a/0x20 [ 325.884701][T20043] _copy_from_user+0x1c/0xa0 [ 325.884734][T20043] restore_altstack+0x4d/0xd0 [ 325.884782][T20043] __do_sys_rt_sigreturn+0xe5/0x180 [ 325.884814][T20043] x64_sys_call+0x2b49/0x2e10 [ 325.884834][T20043] do_syscall_64+0xc9/0x1c0 [ 325.884921][T20043] ? clear_bhb_loop+0x25/0x80 [ 325.884943][T20043] ? clear_bhb_loop+0x25/0x80 [ 325.884964][T20043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.885109][T20043] RIP: 0033:0x7f4960f39359 [ 325.885127][T20043] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 325.885150][T20043] RSP: 002b:00007f495f5fea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 325.885172][T20043] RAX: ffffffffffffffda RBX: 00007f49611b5fa0 RCX: 00007f4960f39359 [ 325.885212][T20043] RDX: 00007f495f5fea80 RSI: 00007f495f5febb0 RDI: 0000000000000021 [ 325.885224][T20043] RBP: 00007f495f5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 325.885235][T20043] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 325.885246][T20043] R13: 0000000000000000 R14: 00007f49611b5fa0 R15: 00007fff368dcd88 [ 325.885263][T20043] [ 326.158856][T20063] loop8: detected capacity change from 0 to 512 [ 326.165914][T20063] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 326.176177][T20066] loop4: detected capacity change from 0 to 1024 [ 326.183847][T20066] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.197323][T20063] EXT4-fs (loop8): 1 truncate cleaned up [ 326.203485][T20063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.205580][T20066] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4283: Invalid block bitmap block 0 in block_group 0 [ 326.248012][T20066] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4283: Failed to acquire dquot type 0 [ 326.269596][T20066] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.4283: Freeing blocks not in datazone - block = 0, count = 4096 [ 326.289201][T20066] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4283: Invalid inode bitmap blk 0 in block_group 0 [ 326.302130][ T4099] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:20: Failed to release dquot type 0 [ 326.323026][T20075] FAULT_INJECTION: forcing a failure. [ 326.323026][T20075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.336253][T20075] CPU: 1 UID: 0 PID: 20075 Comm: syz.0.4285 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 326.336293][T20075] Tainted: [W]=WARN [ 326.336301][T20075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.336366][T20075] Call Trace: [ 326.336374][T20075] [ 326.336384][T20075] dump_stack_lvl+0xf6/0x150 [ 326.336407][T20075] dump_stack+0x15/0x1a [ 326.336421][T20075] should_fail_ex+0x261/0x270 [ 326.336444][T20075] should_fail+0xb/0x10 [ 326.336463][T20075] should_fail_usercopy+0x1a/0x20 [ 326.336516][T20075] _copy_from_user+0x1c/0xa0 [ 326.336598][T20075] do_semtimedop+0x15a/0x220 [ 326.336652][T20075] __x64_sys_semop+0x43/0x50 [ 326.336678][T20075] x64_sys_call+0x1b0e/0x2e10 [ 326.336775][T20075] do_syscall_64+0xc9/0x1c0 [ 326.336803][T20075] ? clear_bhb_loop+0x25/0x80 [ 326.336829][T20075] ? clear_bhb_loop+0x25/0x80 [ 326.336904][T20075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.336929][T20075] RIP: 0033:0x7f4960f9d169 [ 326.337017][T20075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.337035][T20075] RSP: 002b:00007f495f5de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 326.337056][T20075] RAX: ffffffffffffffda RBX: 00007f49611b6080 RCX: 00007f4960f9d169 [ 326.337071][T20075] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000005 [ 326.337086][T20075] RBP: 00007f495f5de090 R08: 0000000000000000 R09: 0000000000000000 [ 326.337098][T20075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.337109][T20075] R13: 0000000000000001 R14: 00007f49611b6080 R15: 00007fff368dcd88 [ 326.337138][T20075] [ 326.404242][T20066] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 326.520053][T17285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.533299][T20066] EXT4-fs (loop4): 1 orphan inode deleted [ 326.545168][T20066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.607674][T20078] loop8: detected capacity change from 0 to 1024 [ 326.626895][T20078] EXT4-fs (loop8): orphan cleanup on readonly fs [ 326.634178][T20078] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.4286: bad orphan inode 8 [ 326.635527][T20080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20080 comm=syz.4.4283 [ 326.678006][T20078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.691542][T20078] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 326.711653][T20078] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 326.726473][T20078] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 326.739147][T17719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.776598][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 326.869465][T20095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4292'. [ 326.997542][T20105] netlink: 'syz.4.4296': attribute type 1 has an invalid length. [ 327.150540][T20118] loop0: detected capacity change from 0 to 1024 [ 327.157843][T20118] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.173902][T20118] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4299: Invalid block bitmap block 0 in block_group 0 [ 327.190884][T20118] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4299: Failed to acquire dquot type 0 [ 327.202681][T20118] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.4299: Freeing blocks not in datazone - block = 0, count = 4096 [ 327.219944][T20118] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4299: Invalid inode bitmap blk 0 in block_group 0 [ 327.232802][T20118] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 327.241535][ T4099] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:20: Failed to release dquot type 0 [ 327.258474][T20118] EXT4-fs (loop0): 1 orphan inode deleted [ 327.265011][T20118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.332547][T20126] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20126 comm=syz.0.4299 [ 327.356871][T17760] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.377542][T17285] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.418398][T20133] random: crng reseeded on system resumption [ 327.490001][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 327.490016][ T29] audit: type=1326 audit(19043830.131:16275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.8.4302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x0 [ 327.590757][T20150] loop0: detected capacity change from 0 to 512 [ 327.643774][T20155] loop2: detected capacity change from 0 to 512 [ 327.660254][T20150] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4310: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 327.666582][T20155] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 327.677729][T20150] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 327.687198][T20155] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 327.687229][T20155] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4311: Failed to acquire dquot type 1 [ 327.702271][T20150] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4310: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 327.706753][T20155] EXT4-fs (loop2): 1 truncate cleaned up [ 327.721642][T20150] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 327.750565][T20158] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4310: bg 0: block 18: invalid block bitmap [ 327.752394][T20150] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4310: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 327.782860][T20150] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 327.793152][T20150] Quota error (device loop0): write_blk: dquota write failed [ 327.801011][T20150] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 327.817082][T20150] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4310: Failed to acquire dquot type 1 [ 327.819720][T20154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.852443][T20154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.873611][ T29] audit: type=1400 audit(19043830.530:16276): avc: denied { ioctl } for pid=20153 comm="syz.9.4312" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51606 ioctlcmd=0x550d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 327.912409][T20161] loop4: detected capacity change from 0 to 512 [ 327.919081][T20161] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.925852][T20161] EXT4-fs: inline encryption not supported [ 327.941215][T20161] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 327.950351][T20161] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 327.963379][ T29] audit: type=1326 audit(19043830.624:16277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20163 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4960f9d169 code=0x7ffc0000 [ 327.987120][ T29] audit: type=1326 audit(19043830.624:16278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20163 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4960f9d169 code=0x7ffc0000 [ 327.994216][T20161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002] [ 328.010574][ T29] audit: type=1326 audit(19043830.624:16279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20163 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4960f9d1a3 code=0x7ffc0000 [ 328.041900][ T29] audit: type=1326 audit(19043830.624:16280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20163 comm="syz.0.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4960f9d169 code=0x7ffc0000 [ 328.065757][T20161] System zones: 0-2, 18-18, 34-34 [ 328.074189][T20161] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.4313: couldn't read orphan inode 15 (err -116) [ 328.087833][T20161] EXT4-fs (loop4): Remounting filesystem read-only [ 328.094959][T20161] SELinux: (dev loop4, type ext2) getxattr errno 5 [ 328.254508][T20188] loop4: detected capacity change from 0 to 512 [ 328.261032][T20188] EXT4-fs: Ignoring removed nobh option [ 328.295260][T20188] EXT4-fs error (device loop4): ext4_do_update_inode:5158: inode #16: comm syz.4.4325: corrupted inode contents [ 328.307355][T20188] EXT4-fs (loop4): Remounting filesystem read-only [ 328.314100][T20188] EXT4-fs (loop4): 1 truncate cleaned up [ 328.320374][T20188] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 328.327422][ T4099] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 328.338015][ T4099] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 328.350483][ T4099] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 328.420703][T20207] loop4: detected capacity change from 0 to 512 [ 328.439588][T20187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.465150][T20187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.533551][T20207] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4331: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 328.557590][T20204] loop2: detected capacity change from 0 to 128 [ 328.564293][T20204] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.575453][T20216] random: crng reseeded on system resumption [ 328.582863][T20217] __nla_validate_parse: 1 callbacks suppressed [ 328.582881][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4324'. [ 328.605086][T20204] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 328.619958][T20207] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 328.629955][T20207] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4331: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 328.650742][T20218] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4331: bg 0: block 18: invalid block bitmap [ 328.667524][T20207] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 328.690079][T20207] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4331: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 328.744288][T20207] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 328.757519][T20207] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4331: Failed to acquire dquot type 1 [ 328.774211][T20229] loop2: detected capacity change from 0 to 512 [ 328.780840][T20229] EXT4-fs: Ignoring removed nobh option [ 328.799958][T20229] EXT4-fs error (device loop2): ext4_do_update_inode:5158: inode #16: comm syz.2.4338: corrupted inode contents [ 328.801668][T20233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4340'. [ 328.821757][T20229] EXT4-fs (loop2): Remounting filesystem read-only [ 328.829560][T20233] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4340'. [ 328.832048][T20229] EXT4-fs (loop2): 1 truncate cleaned up [ 328.845500][T20229] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 328.852880][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 328.863651][ T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 328.874689][ T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 328.914124][T20240] loop2: detected capacity change from 0 to 512 [ 328.956788][T20240] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4343: Failed to acquire dquot type 1 [ 328.970000][T20240] EXT4-fs (loop2): 1 truncate cleaned up [ 329.003333][T20251] loop0: detected capacity change from 0 to 1024 [ 329.017403][T20255] random: crng reseeded on system resumption [ 329.032105][T20253] loop4: detected capacity change from 0 to 1024 [ 329.085931][T20253] bridge0: port 3(syz_tun) entered blocking state [ 329.092502][T20253] bridge0: port 3(syz_tun) entered disabled state [ 329.099147][T20253] syz_tun: entered allmulticast mode [ 329.105240][T20253] syz_tun: entered promiscuous mode [ 329.110635][T20253] bridge0: port 3(syz_tun) entered blocking state [ 329.117102][T20253] bridge0: port 3(syz_tun) entered forwarding state [ 329.124126][T20251] bridge0: port 3(syz_tun) entered blocking state [ 329.131928][T20251] bridge0: port 3(syz_tun) entered disabled state [ 329.138640][T20251] syz_tun: entered allmulticast mode [ 329.145163][T20251] syz_tun: entered promiscuous mode [ 329.150759][T20251] bridge0: port 3(syz_tun) entered blocking state [ 329.157286][T20251] bridge0: port 3(syz_tun) entered forwarding state [ 329.231898][T20269] loop2: detected capacity change from 0 to 512 [ 329.238883][T20269] EXT4-fs: Ignoring removed nobh option [ 329.276211][T20269] EXT4-fs error (device loop2): ext4_do_update_inode:5158: inode #16: comm syz.2.4353: corrupted inode contents [ 329.288304][T20269] EXT4-fs (loop2): Remounting filesystem read-only [ 329.295068][T20269] EXT4-fs (loop2): 1 truncate cleaned up [ 329.301006][T20269] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 329.307997][ T4079] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 329.318605][ T4079] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 329.329132][ T4079] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 329.441681][T20278] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.450045][T20278] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.458498][T20278] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.512144][T20283] FAULT_INJECTION: forcing a failure. [ 329.512144][T20283] name failslab, interval 1, probability 0, space 0, times 0 [ 329.524962][T20283] CPU: 0 UID: 0 PID: 20283 Comm: syz.2.4358 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 329.525048][T20283] Tainted: [W]=WARN [ 329.525098][T20283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.525111][T20283] Call Trace: [ 329.525119][T20283] [ 329.525127][T20283] dump_stack_lvl+0xf6/0x150 [ 329.525169][T20283] dump_stack+0x15/0x1a [ 329.525184][T20283] should_fail_ex+0x261/0x270 [ 329.525207][T20283] should_failslab+0x8f/0xb0 [ 329.525231][T20283] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 329.525265][T20283] ? sidtab_sid2str_get+0xb8/0x140 [ 329.525363][T20283] ? vsnprintf+0x84d/0x8a0 [ 329.525399][T20283] kmemdup_noprof+0x2b/0x70 [ 329.525434][T20283] sidtab_sid2str_get+0xb8/0x140 [ 329.525495][T20283] security_sid_to_context_core+0x1eb/0x2f0 [ 329.525518][T20283] security_sid_to_context+0x27/0x30 [ 329.525540][T20283] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 329.525571][T20283] security_lsmprop_to_secctx+0x40/0x80 [ 329.525689][T20283] audit_log_task_context+0x7a/0x180 [ 329.525717][T20283] audit_log_task+0xfb/0x250 [ 329.525757][T20283] audit_seccomp+0x68/0x130 [ 329.525826][T20283] __seccomp_filter+0x694/0x10e0 [ 329.525857][T20283] ? vfs_write+0x669/0x950 [ 329.525911][T20283] ? putname+0xe1/0x100 [ 329.525944][T20283] __secure_computing+0x7e/0x160 [ 329.525973][T20283] syscall_trace_enter+0xcf/0x1f0 [ 329.526000][T20283] ? fpregs_assert_state_consistent+0x83/0xa0 [ 329.526067][T20283] do_syscall_64+0xaa/0x1c0 [ 329.526094][T20283] ? clear_bhb_loop+0x25/0x80 [ 329.526121][T20283] ? clear_bhb_loop+0x25/0x80 [ 329.526147][T20283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.526172][T20283] RIP: 0033:0x7f4d8605d169 [ 329.526186][T20283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.526251][T20283] RSP: 002b:00007f4d846c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b6 [ 329.526268][T20283] RAX: ffffffffffffffda RBX: 00007f4d86275fa0 RCX: 00007f4d8605d169 [ 329.526279][T20283] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 329.526290][T20283] RBP: 00007f4d846c7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.526300][T20283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.526311][T20283] R13: 0000000000000000 R14: 00007f4d86275fa0 R15: 00007fffb4d2d888 [ 329.526327][T20283] [ 329.796366][T20287] loop2: detected capacity change from 0 to 512 [ 329.807549][T20289] random: crng reseeded on system resumption [ 329.836228][T20287] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4360: Failed to acquire dquot type 1 [ 329.851586][T20287] EXT4-fs (loop2): 1 truncate cleaned up [ 329.908962][T20298] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.917317][T20298] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.929543][T20298] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.963209][T20303] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 329.986454][T20309] netlink: 'syz.2.4368': attribute type 3 has an invalid length. [ 329.994315][T20309] netlink: 'syz.2.4368': attribute type 3 has an invalid length. [ 330.162492][T20317] 9pnet_fd: Insufficient options for proto=fd [ 330.169563][T20326] loop4: detected capacity change from 0 to 512 [ 330.234333][T20326] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4372: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 330.256112][T20326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 330.275438][T20326] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4372: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 330.294706][T20342] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4372: bg 0: block 18: invalid block bitmap [ 330.311215][T20326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 330.322950][T20326] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4372: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 330.341850][T20326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 330.354184][T20326] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4372: Failed to acquire dquot type 1 [ 330.427863][T20356] loop4: detected capacity change from 0 to 512 [ 330.447984][T20356] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4374: Failed to acquire dquot type 1 [ 330.460206][T20356] EXT4-fs (loop4): 1 truncate cleaned up [ 330.505794][T20372] loop4: detected capacity change from 0 to 1024 [ 330.892904][T20446] loop9: detected capacity change from 0 to 512 [ 330.914440][T20448] random: crng reseeded on system resumption [ 331.099002][T20464] loop0: detected capacity change from 0 to 1024 [ 331.107778][T20464] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 331.124396][T20464] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4380: Invalid block bitmap block 0 in block_group 0 [ 331.164364][T20464] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4380: Failed to acquire dquot type 0 [ 331.177187][T20464] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.4380: Freeing blocks not in datazone - block = 0, count = 4096 [ 331.191552][T20464] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4380: Invalid inode bitmap blk 0 in block_group 0 [ 331.204405][T20464] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 331.214228][T20464] EXT4-fs (loop0): 1 orphan inode deleted [ 331.222305][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:1: Failed to release dquot type 0 [ 331.294191][T20474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20474 comm=syz.0.4380 [ 331.349900][T20477] loop8: detected capacity change from 0 to 512 [ 331.439461][T20484] loop4: detected capacity change from 0 to 512 [ 331.458924][T20485] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4384: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 331.508744][T20484] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 331.509349][T20487] loop0: detected capacity change from 0 to 128 [ 331.520054][T20485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 331.539461][T20484] EXT4-fs (loop4): 1 truncate cleaned up [ 331.552042][T20485] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4384: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 331.569032][T20484] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 331.575672][T20484] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 331.583503][T20484] vhci_hcd vhci_hcd.0: Device attached [ 331.589696][T20477] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4384: bg 0: block 18: invalid block bitmap [ 331.606475][T20485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 331.618148][T20485] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4384: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 331.638920][T20485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 331.649109][T20485] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.4384: Failed to acquire dquot type 1 [ 331.683956][T20484] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.4386: corrupted in-inode xattr: overlapping e_value [ 331.713452][T20484] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.4386: unable to update i_inline_off [ 331.886847][T20496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 332.743746][T20489] vhci_hcd: connection closed [ 332.753602][T15744] vhci_hcd: stop threads [ 332.762685][T15744] vhci_hcd: release socket [ 332.767190][T15744] vhci_hcd: disconnect device [ 332.769768][ T3377] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 332.782982][T16126] kernel write not supported for file bpf-prog (pid: 16126 comm: kworker/1:5) [ 332.841923][T20502] xt_hashlimit: max too large, truncated to 1048576 [ 332.883856][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 332.883887][ T29] audit: type=1400 audit(19043835.800:16396): avc: denied { unmount } for pid=17760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 332.885725][ T3377] usb 9-1: enqueue for inactive port 0 [ 332.915864][ T3377] usb 9-1: enqueue for inactive port 0 [ 332.921464][ T3377] usb 9-1: enqueue for inactive port 0 [ 332.996619][ T3377] vhci_hcd: vhci_device speed not set [ 333.274766][T20525] loop0: detected capacity change from 0 to 512 [ 333.314131][T20525] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 333.324315][T20525] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 333.334266][T20525] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4399: Failed to acquire dquot type 1 [ 333.381870][T20525] EXT4-fs (loop0): 1 truncate cleaned up [ 334.021685][T20535] loop4: detected capacity change from 0 to 512 [ 334.037981][T20534] random: crng reseeded on system resumption [ 334.123367][ T29] audit: type=1326 audit(19043837.102:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20533 comm="syz.0.4401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4960f9d169 code=0x0 [ 334.154269][T20535] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4402: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 334.218038][T20535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 334.250141][T20535] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4402: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 334.286242][T20539] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4402: bg 0: block 18: invalid block bitmap [ 334.305109][T20535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 334.327310][T20535] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4402: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 334.379070][T20535] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 334.398862][T20535] Quota error (device loop4): write_blk: dquota write failed [ 334.406726][T20543] xt_hashlimit: max too large, truncated to 1048576 [ 334.426742][T20535] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 334.436602][T20535] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4402: Failed to acquire dquot type 1 [ 334.475623][T20545] loop8: detected capacity change from 0 to 512 [ 334.492542][T20545] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 334.534014][T20545] EXT4-fs (loop8): 1 truncate cleaned up [ 334.548221][ T29] audit: type=1400 audit(19043837.532:16398): avc: denied { create } for pid=20544 comm="syz.8.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.573279][ T29] audit: type=1400 audit(19043837.532:16399): avc: denied { read } for pid=20544 comm="syz.8.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 334.578457][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 334.594015][ T29] audit: type=1400 audit(19043837.595:16400): avc: denied { create } for pid=20548 comm="syz.2.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 334.621487][ T29] audit: type=1400 audit(19043837.595:16401): avc: denied { connect } for pid=20548 comm="syz.2.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 334.654959][T20553] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 334.700698][T17940] bridge0: port 3(syz_tun) entered disabled state [ 334.716786][T17940] syz_tun (unregistering): left allmulticast mode [ 334.723286][T17940] syz_tun (unregistering): left promiscuous mode [ 334.729779][T17940] bridge0: port 3(syz_tun) entered disabled state [ 334.866271][T20566] xt_hashlimit: max too large, truncated to 1048576 [ 334.950372][T20568] FAULT_INJECTION: forcing a failure. [ 334.950372][T20568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.964559][T20568] CPU: 0 UID: 0 PID: 20568 Comm: syz.0.4416 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 334.964660][T20568] Tainted: [W]=WARN [ 334.964666][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.964678][T20568] Call Trace: [ 334.964683][T20568] [ 334.964689][T20568] dump_stack_lvl+0xf6/0x150 [ 334.964714][T20568] dump_stack+0x15/0x1a [ 334.964733][T20568] should_fail_ex+0x261/0x270 [ 334.964828][T20568] should_fail+0xb/0x10 [ 334.964847][T20568] should_fail_usercopy+0x1a/0x20 [ 334.964932][T20568] _copy_from_user+0x1c/0xa0 [ 334.964967][T20568] ppp_get_filter+0x43/0x160 [ 334.964986][T20568] ppp_ioctl+0xc2a/0x1250 [ 334.965086][T20568] ? __fget_files+0x186/0x1c0 [ 334.965121][T20568] ? __pfx_ppp_ioctl+0x10/0x10 [ 334.965239][T20568] __se_sys_ioctl+0xc9/0x140 [ 334.965276][T20568] __x64_sys_ioctl+0x43/0x50 [ 334.965309][T20568] x64_sys_call+0x168d/0x2e10 [ 334.965329][T20568] do_syscall_64+0xc9/0x1c0 [ 334.965413][T20568] ? clear_bhb_loop+0x25/0x80 [ 334.965503][T20568] ? clear_bhb_loop+0x25/0x80 [ 334.965527][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.965561][T20568] RIP: 0033:0x7f4960f9d169 [ 334.965575][T20568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.965609][T20568] RSP: 002b:00007f495f5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.965631][T20568] RAX: ffffffffffffffda RBX: 00007f49611b5fa0 RCX: 00007f4960f9d169 [ 334.965644][T20568] RDX: 0000200000000100 RSI: 0000000040107447 RDI: 0000000000000004 [ 334.965655][T20568] RBP: 00007f495f5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 334.965670][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.965684][T20568] R13: 0000000000000000 R14: 00007f49611b5fa0 R15: 00007fff368dcd88 [ 334.965707][T20568] [ 335.231774][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/1:3) [ 335.248217][T20580] __nla_validate_parse: 6 callbacks suppressed [ 335.248255][T20580] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4420'. [ 335.289382][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4422'. [ 335.341790][T20592] random: crng reseeded on system resumption [ 335.526410][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4431'. [ 335.558185][ T3378] kernel write not supported for file bpf-prog (pid: 3378 comm: kworker/1:3) [ 335.586004][T20572] chnl_net:caif_netlink_parms(): no params data found [ 335.609056][T20617] FAULT_INJECTION: forcing a failure. [ 335.609056][T20617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.622266][T20617] CPU: 0 UID: 0 PID: 20617 Comm: syz.8.4434 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 335.622297][T20617] Tainted: [W]=WARN [ 335.622303][T20617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.622316][T20617] Call Trace: [ 335.622323][T20617] [ 335.622330][T20617] dump_stack_lvl+0xf6/0x150 [ 335.622357][T20617] dump_stack+0x15/0x1a [ 335.622375][T20617] should_fail_ex+0x261/0x270 [ 335.622457][T20617] should_fail+0xb/0x10 [ 335.622481][T20617] should_fail_usercopy+0x1a/0x20 [ 335.622505][T20617] _copy_from_user+0x1c/0xa0 [ 335.622545][T20617] do_handle_open+0x39a/0x640 [ 335.622572][T20617] __x64_sys_open_by_handle_at+0x46/0x50 [ 335.622662][T20617] x64_sys_call+0xe55/0x2e10 [ 335.622682][T20617] do_syscall_64+0xc9/0x1c0 [ 335.622707][T20617] ? clear_bhb_loop+0x25/0x80 [ 335.622760][T20617] ? clear_bhb_loop+0x25/0x80 [ 335.622780][T20617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.622893][T20617] RIP: 0033:0x7f119215d169 [ 335.622908][T20617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.622925][T20617] RSP: 002b:00007f11907c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 335.622943][T20617] RAX: ffffffffffffffda RBX: 00007f1192375fa0 RCX: 00007f119215d169 [ 335.623013][T20617] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 335.623025][T20617] RBP: 00007f11907c7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.623036][T20617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.623049][T20617] R13: 0000000000000000 R14: 00007f1192375fa0 R15: 00007ffc5fb389d8 [ 335.623071][T20617] [ 335.815726][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4433'. [ 335.827785][T20613] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4433'. [ 335.836776][T20613] netem: change failed [ 335.844464][T20623] netlink: 'syz.0.4436': attribute type 13 has an invalid length. [ 335.856572][T20620] vlan2: entered promiscuous mode [ 335.861729][T20620] bond0: entered promiscuous mode [ 335.867011][T20620] macvlan2: entered promiscuous mode [ 335.919068][T20634] loop4: detected capacity change from 0 to 128 [ 335.932455][T20635] loop0: detected capacity change from 0 to 512 [ 336.040112][T20635] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4439: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 336.059156][T20635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 336.073785][T20572] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.074794][T20635] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4439: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 336.080967][T20572] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.110123][T20572] bridge_slave_0: entered allmulticast mode [ 336.176402][T20572] bridge_slave_0: entered promiscuous mode [ 336.183878][T20641] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 336.201007][T20572] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.208129][T20572] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.219882][T20572] bridge_slave_1: entered allmulticast mode [ 336.226729][T20572] bridge_slave_1: entered promiscuous mode [ 336.245612][T20640] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4439: bg 0: block 18: invalid block bitmap [ 336.507680][T20645] random: crng reseeded on system resumption [ 336.521072][T20635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 336.550473][T20635] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.4439: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 336.595779][T20635] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 336.597803][T20572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.606446][T20635] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4439: Failed to acquire dquot type 1 [ 336.628148][T20572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.723159][T20654] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4444'. [ 336.745931][T20572] team0: Port device team_slave_0 added [ 336.752987][T20572] team0: Port device team_slave_1 added [ 336.778602][T20654] 9pnet: Could not find request transport: f [ 336.803879][T20659] loop4: detected capacity change from 0 to 128 [ 336.841147][T20572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.848183][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.874175][T20572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.890581][T20572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.897671][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.923755][T20572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.090235][T20572] hsr_slave_0: entered promiscuous mode [ 337.116774][T20572] hsr_slave_1: entered promiscuous mode [ 337.136749][T20572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.163039][T20572] Cannot create hsr debugfs directory [ 337.399112][T20572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.530350][T20572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.547727][T20680] loop4: detected capacity change from 0 to 512 [ 337.588989][T20682] xt_hashlimit: max too large, truncated to 1048576 [ 337.612789][T20572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.623830][T20680] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4453: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 337.685392][T20572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.701306][T20680] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 337.733499][T20687] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 337.762295][T20680] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4453: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 337.767580][T20685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4453: bg 0: block 18: invalid block bitmap [ 337.805073][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4455'. [ 337.814154][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4455'. [ 337.827534][T20680] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 337.833427][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4455'. [ 337.856621][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 337.856637][ T29] audit: type=1326 audit(19043841.017:16506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 337.885828][ T29] audit: type=1326 audit(19043841.017:16507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 337.932759][T20680] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.4453: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 337.959988][T20572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 337.980919][ T29] audit: type=1326 audit(19043841.080:16508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.003331][T20680] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 338.003852][ T29] audit: type=1326 audit(19043841.080:16509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.035859][ T29] audit: type=1326 audit(19043841.080:16510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.058709][ T29] audit: type=1326 audit(19043841.080:16511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.081609][ T29] audit: type=1326 audit(19043841.080:16512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.104649][ T29] audit: type=1326 audit(19043841.080:16513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.109712][T20680] Quota error (device loop4): write_blk: dquota write failed [ 338.127484][ T29] audit: type=1326 audit(19043841.091:16514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20686 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f119215d169 code=0x7ffc0000 [ 338.165717][T20680] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.4453: Failed to acquire dquot type 1 [ 338.191595][T20572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 338.225716][T20572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 338.266951][T20572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 338.403484][T20572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.429135][T20572] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.449170][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.456274][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.492869][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.500035][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.521305][T20572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.531723][T20572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.546853][T20705] loop9: detected capacity change from 0 to 1024 [ 338.587950][T20572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.625214][T20703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.634909][T20703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.684324][T20572] veth0_vlan: entered promiscuous mode [ 338.696269][T20572] veth1_vlan: entered promiscuous mode [ 338.713706][T20572] veth0_macvtap: entered promiscuous mode [ 338.724470][T20572] veth1_macvtap: entered promiscuous mode [ 338.741684][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.752323][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.762232][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.772749][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.782661][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.793467][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.803424][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.813919][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.823855][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.834332][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.844177][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.854630][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.864546][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.875016][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.884947][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.895392][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.909408][T20572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.917941][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.928409][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.938355][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.948840][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.958733][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.969188][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.979054][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.989544][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.999385][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.009996][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.019920][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.030394][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.040257][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.050721][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.060576][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.071062][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.083543][T20572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.091989][T20720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20720 comm=syz.8.4462 [ 339.107126][T20572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.116031][T20572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.124840][T20572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.133595][T20572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.155042][T20720] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4462'. [ 339.279574][T20734] 9pnet_fd: Insufficient options for proto=fd [ 339.381979][T20745] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 339.476115][T20750] loop8: detected capacity change from 0 to 1024 [ 339.547778][T20750] bridge0: port 3(syz_tun) entered blocking state [ 339.554293][T20750] bridge0: port 3(syz_tun) entered disabled state [ 339.579566][T20750] syz_tun: entered allmulticast mode [ 339.592164][T20750] syz_tun: entered promiscuous mode [ 339.605802][T20750] bridge0: port 3(syz_tun) entered blocking state [ 339.612331][T20750] bridge0: port 3(syz_tun) entered forwarding state [ 340.166366][T20762] loop8: detected capacity change from 0 to 1024 [ 340.185691][T20762] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.4475: bad orphan inode 2304 [ 340.273560][T20764] FAULT_INJECTION: forcing a failure. [ 340.273560][T20764] name failslab, interval 1, probability 0, space 0, times 0 [ 340.286270][T20764] CPU: 0 UID: 0 PID: 20764 Comm: syz.8.4475 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 340.286310][T20764] Tainted: [W]=WARN [ 340.286342][T20764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 340.286358][T20764] Call Trace: [ 340.286367][T20764] [ 340.286376][T20764] dump_stack_lvl+0xf6/0x150 [ 340.286398][T20764] dump_stack+0x15/0x1a [ 340.286412][T20764] should_fail_ex+0x261/0x270 [ 340.286437][T20764] should_failslab+0x8f/0xb0 [ 340.286456][T20764] __kmalloc_noprof+0xad/0x410 [ 340.286556][T20764] ? iter_file_splice_write+0xf9/0x980 [ 340.286590][T20764] iter_file_splice_write+0xf9/0x980 [ 340.286660][T20764] ? __pfx_iter_file_splice_write+0x10/0x10 [ 340.286701][T20764] direct_splice_actor+0x160/0x2c0 [ 340.286741][T20764] splice_direct_to_actor+0x305/0x680 [ 340.286823][T20764] ? __pfx_direct_splice_actor+0x10/0x10 [ 340.286938][T20764] do_splice_direct+0xd9/0x150 [ 340.286977][T20764] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 340.287062][T20764] do_sendfile+0x40a/0x690 [ 340.287128][T20764] __x64_sys_sendfile64+0x113/0x160 [ 340.287156][T20764] x64_sys_call+0xfc3/0x2e10 [ 340.287237][T20764] do_syscall_64+0xc9/0x1c0 [ 340.287308][T20764] ? clear_bhb_loop+0x25/0x80 [ 340.287329][T20764] ? clear_bhb_loop+0x25/0x80 [ 340.287350][T20764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.287376][T20764] RIP: 0033:0x7f119215d169 [ 340.287393][T20764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.287416][T20764] RSP: 002b:00007f11907a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 340.287481][T20764] RAX: ffffffffffffffda RBX: 00007f1192376080 RCX: 00007f119215d169 [ 340.287497][T20764] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 340.287511][T20764] RBP: 00007f11907a6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.287524][T20764] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 340.287566][T20764] R13: 0000000000000000 R14: 00007f1192376080 R15: 00007ffc5fb389d8 [ 340.287588][T20764] [ 340.761956][ T23] page_pool_release_retry() stalled pool shutdown: id 53, 1 inflight 182 sec [ 340.862086][T20766] __nla_validate_parse: 6 callbacks suppressed [ 340.862105][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4476'. [ 340.934085][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4478'. [ 340.943198][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4478'. [ 340.952198][T20770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4478'. [ 340.985154][T20772] loop0: detected capacity change from 0 to 128 [ 340.992004][T20772] vfat: Unknown parameter '' [ 341.078905][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4483'. [ 341.386642][T20785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.399353][T20785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.420006][T20787] lo speed is unknown, defaulting to 1000 [ 341.427134][T20787] lo speed is unknown, defaulting to 1000 [ 341.433127][T20787] lo speed is unknown, defaulting to 1000 [ 341.464323][T20787] infiniband sz1: set active [ 341.469119][T20787] infiniband sz1: added lo [ 341.473713][ T23] lo speed is unknown, defaulting to 1000 [ 341.494547][T20787] RDS/IB: sz1: added [ 341.496285][T20789] 9p: Unknown access argument : -22 [ 341.502446][T20787] smc: adding ib device sz1 with port count 1 [ 341.510099][T20787] smc: ib device sz1 port 1 has pnetid [ 341.516240][ T3377] lo speed is unknown, defaulting to 1000 [ 341.521995][T20787] lo speed is unknown, defaulting to 1000 [ 341.554917][T20787] lo speed is unknown, defaulting to 1000 [ 341.584926][T20787] lo speed is unknown, defaulting to 1000 [ 341.614906][T20787] lo speed is unknown, defaulting to 1000 [ 341.644691][T20787] lo speed is unknown, defaulting to 1000 [ 341.674798][T20787] lo speed is unknown, defaulting to 1000 [ 341.705756][T20787] lo speed is unknown, defaulting to 1000 [ 341.736704][T20787] lo speed is unknown, defaulting to 1000 [ 341.767905][T20787] lo speed is unknown, defaulting to 1000 [ 341.798622][T20787] lo speed is unknown, defaulting to 1000 [ 341.829122][T20787] lo speed is unknown, defaulting to 1000 [ 341.860043][T20787] lo speed is unknown, defaulting to 1000 [ 341.890257][T20787] lo speed is unknown, defaulting to 1000 [ 341.922218][T20787] lo speed is unknown, defaulting to 1000 [ 341.953288][T20787] lo speed is unknown, defaulting to 1000 [ 341.987401][T20787] lo speed is unknown, defaulting to 1000 [ 342.018069][T20787] lo speed is unknown, defaulting to 1000 [ 342.053678][T20787] lo speed is unknown, defaulting to 1000 [ 342.089815][T20787] lo speed is unknown, defaulting to 1000 [ 342.136897][T20787] lo speed is unknown, defaulting to 1000 [ 342.171694][T20787] lo speed is unknown, defaulting to 1000 [ 342.228498][T20787] lo speed is unknown, defaulting to 1000 [ 342.249090][T20811] ================================================================== [ 342.257214][T20811] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 342.264699][T20811] [ 342.267034][T20811] write to 0xffff88810534a400 of 8 bytes by task 20808 on cpu 1: [ 342.271204][T20787] lo speed is unknown, defaulting to 1000 [ 342.274744][T20811] mas_wmb_replace+0x224/0x1510 [ 342.285339][T20811] mas_wr_store_entry+0x158c/0x2460 [ 342.290572][T20811] mas_store_prealloc+0x6d5/0x960 [ 342.295651][T20811] vma_complete+0x3a7/0x760 [ 342.300166][T20811] __split_vma+0x5d9/0x6a0 [ 342.304614][T20811] vma_modify+0x105/0x200 [ 342.308969][T20811] vma_modify_flags+0xf3/0x120 [ 342.313754][T20811] mprotect_fixup+0x323/0x600 [ 342.318447][T20811] do_mprotect_pkey+0x6ce/0x9a0 [ 342.323313][T20811] __x64_sys_mprotect+0x48/0x60 [ 342.328206][T20811] x64_sys_call+0x272f/0x2e10 [ 342.332891][T20811] do_syscall_64+0xc9/0x1c0 [ 342.337404][T20811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.343304][T20811] [ 342.345631][T20811] read to 0xffff88810534a400 of 8 bytes by task 20811 on cpu 0: [ 342.353265][T20811] mtree_range_walk+0x347/0x460 [ 342.358124][T20811] mas_walk+0x16e/0x320 [ 342.362287][T20811] lock_vma_under_rcu+0x97/0x290 [ 342.367237][T20811] exc_page_fault+0x150/0x650 [ 342.371938][T20811] asm_exc_page_fault+0x26/0x30 [ 342.376798][T20811] [ 342.379125][T20811] value changed: 0xffff888127811641 -> 0xffff88810534a400 [ 342.386230][T20811] [ 342.388557][T20811] Reported by Kernel Concurrency Sanitizer on: [ 342.394710][T20811] CPU: 0 UID: 0 PID: 20811 Comm: syz.8.4494 Tainted: G W 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(voluntary) [ 342.408348][T20811] Tainted: [W]=WARN [ 342.412152][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.422210][T20811] ================================================================== [ 342.454059][T20787] lo speed is unknown, defaulting to 1000 [ 342.487916][T20787] lo speed is unknown, defaulting to 1000 [ 342.518363][T20787] lo speed is unknown, defaulting to 1000 [ 342.548389][T20787] lo speed is unknown, defaulting to 1000 [ 342.577967][T20787] lo speed is unknown, defaulting to 1000 [ 342.608531][T20787] lo speed is unknown, defaulting to 1000 [ 342.638664][T20787] lo speed is unknown, defaulting to 1000 [ 342.669552][T20787] lo speed is unknown, defaulting to 1000 [ 342.700149][T20787] lo speed is unknown, defaulting to 1000 [ 342.729624][T20787] lo speed is unknown, defaulting to 1000 [ 342.759949][T20787] lo speed is unknown, defaulting to 1000 [ 342.791640][T20787] lo speed is unknown, defaulting to 1000 [ 342.822329][T20787] lo speed is unknown, defaulting to 1000 [ 342.851694][T20787] lo speed is unknown, defaulting to 1000 [ 342.883105][T20787] lo speed is unknown, defaulting to 1000 [ 342.914810][T20787] lo speed is unknown, defaulting to 1000 [ 342.946019][T20787] lo speed is unknown, defaulting to 1000 [ 342.976261][T20787] lo speed is unknown, defaulting to 1000 [ 343.006961][T20787] lo speed is unknown, defaulting to 1000 [ 343.039282][T20787] lo speed is unknown, defaulting to 1000 [ 343.069881][T20787] lo speed is unknown, defaulting to 1000 [ 343.100148][T20787] lo speed is unknown, defaulting to 1000 [ 343.131023][T20787] lo speed is unknown, defaulting to 1000 [ 343.161476][T20787] lo speed is unknown, defaulting to 1000 [ 343.191938][T20787] lo speed is unknown, defaulting to 1000 [ 343.223071][T20787] lo speed is unknown, defaulting to 1000 [ 343.253400][T20787] lo speed is unknown, defaulting to 1000 [ 343.283687][T20787] lo speed is unknown, defaulting to 1000 [ 343.313676][T20787] lo speed is unknown, defaulting to 1000 [ 343.344677][T20787] lo speed is unknown, defaulting to 1000 [ 343.374400][T20787] lo speed is unknown, defaulting to 1000 [ 343.405009][T20787] lo speed is unknown, defaulting to 1000 [ 343.435743][T20787] lo speed is unknown, defaulting to 1000 [ 343.466848][T20787] lo speed is unknown, defaulting to 1000 [ 343.497947][T20787] lo speed is unknown, defaulting to 1000 [ 343.530363][T20787] lo speed is unknown, defaulting to 1000 [ 343.561964][T20787] lo speed is unknown, defaulting to 1000 [ 343.593102][T20787] lo speed is unknown, defaulting to 1000