last executing test programs: 2m1.692665334s ago: executing program 32 (id=738): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd(r1, &(0x7f0000000080)={[0x5]}, 0x8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r3, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0x80}}, 0x8ce00) 1m45.277067359s ago: executing program 4 (id=1035): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202014810000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x80, 0x0, @mcast2}, 0x1, {[0x0, 0x7ff]}}, 0x5c) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x80, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 1m44.689852456s ago: executing program 4 (id=1043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x7f}, 0x18) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf251300000044000180080003000000000008000300000000001400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f31000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="64000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c3000000000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="40000180140002006d6163766c616e3100000000000000000800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003800018008000300020000000800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d367265673100000000000000003000018008000100c95f83bad52fa467b9569c984ba87c6f092a3ad77af73acc4797da8f5bcf2371abd7cf939e60aaec6a91c48d1a035a21e3a463b749938d9eb8a113897cfa7960da7b7a201be8641a1390b596032620923ba441b14421839ae15baff72d6f600b7c89e1b2", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000003c0001801400020076657468315f746f5f62726964676500140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000440001801400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000200726f73653000000000000000000000000800030003000000"], 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0xe518e92d100842ae) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeee1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x4092}, 0x18) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3ab, &(0x7f0000000b00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "b72751", 0x375, 0x11, 0x0, @loopback, @empty, {[@fragment={0x3a, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x4, 0x20, '\x00', [@pad1, @generic={0xfd, 0x7d, "c05982bf9f2fc9b9403d41a517d5cc6cc62c0e754ce5a8e817f31ba59144005c072ed21d00d83ce7e9328860c40c2b5e829b2491bb7c43ccf6c31fc6c2b6dfd0c1fea67bd7adcb947bb925fde30a7357e6c6624d6e70cc87c5ebae39a8ea8ea1cd2d7e6a2e053d7f7690bcc30baebba62abcafa584096d5a24300c2a46"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x5, [0x8, 0x8001]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x2, [0xc4c, 0x1ff, 0x8001, 0xe, 0x5, 0x0, 0x345e000, 0xaf16]}}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}]}, @hopopts={0x73, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0x24}, @generic={0x4, 0xec, "21edc9a5dd11177535c345acc0dc917babc59474e2de58453b371cc53f9356d3e459b0a89b1d471e3a4a4d67b53d6af9e3eec8926f4febf9ef4ae7da5651a67885d3c8bb66f01e3699f154f3c2285b8bfb982e12360a062f1edcfc70731cf7e66afa7b9227ed7436f0f944505e853e8d46955042f7c12c79008ae33db5286d04ca00117cc0d9d56a9445d313d424fc41124dd329a3a5a234d41abe7b57b5d01799ae13bc1853cb5d5090ca7676c34c4f8dc1558a33ba5d3845d70759342ca247b1c797ad2cc9b40d6cf6ccc0955c78efc42da5c9331ef17287165bd263fe3271080e9afb23bab4e715c7a8c9"}, @ra={0x5, 0x2, 0x9a6}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x4, [0xe07]}}, @ra={0x5, 0x2, 0xd}, @jumbo={0xc2, 0x4, 0x389}]}, @hopopts={0xa5, 0xc, '\x00', [@ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x6, [0x9, 0x4, 0x9, 0x20a, 0xfef, 0x1, 0x9]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x0, [0x6, 0x80000000]}}, @padn={0x1, 0x1, [0x0]}]}], {0x4e23, 0x4e20, 0xcd, 0x0, @wg=@data={0x4, 0x6, 0x6, "c87b91f7154a476fd5e5668f224668e5ca8bcd6e2aa10e1a53b9e12b95d47ffafe7fcdc6277d260b458b4f23f3bb7d7a1062ae90ee098e73fd4029b1d1c91c0c07dc670d76b13fbc177e249bb9b8cf1665698ddebd34d89e897230a5a3db1f35c0ef3d4b1d8392eb842d1c3d8bbf5544e70c9f57ea37929dfc6699285ac66f53bb8f8f5116809f5d989d3950d89f86acdb67865a56c019a821170baf427e7fc22ef7bf5e0c515e451aa2ca8aafe3b23a4bcc35a203"}}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000068000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400080000000000000000000e00000fbcfe06e2d4c3d9fd09000000010000d5049233b07c0e907edb5f7a8213120c39e122bd2f7556512830127a3fa7b70000"], 0x0) 1m44.549438093s ago: executing program 4 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x0, 0xe8, &(0x7f0000000380)="e2868f4aefac7a67561422c516dc175845e997f8169837a09b4366393e640b0e755f45f91f4b30c8c49475cfb6045b3a4886bddc89b17f03b46ca395d2fab9052906ea669df28484652822fb0bb0b395d161aec424718d1e1dcc5adc4cef9363a93024159b6d7e4e0e2d5cc8ab637193f3efe80d0a2fdcd22b8e4e96dffb6bb350d25a82f272ad0ee1237a9a7b0b3f7dc9ca26d2d54cbf2181d2194cc62965a20bba7b1729b8eccd05d4fe3221476a3f84e565bc054a47fb49d34831e0d9515dce4c3b24b6c432e9916d1cdb9cad4672ab05adc0a8b773cba8d6a26d8bbe8f0edf5b43aa258c76fd"}) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000100)=0x7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES64=r5, @ANYBLOB="80d3c104d1ef8d82e05107a156010a85ecc58076534df270e8d996bc9329a192d27613c152d05a399234af7aa9f554a6628f08ee08cfb9ac29dc5ad4a4a19abd799f399b8f62afe7cdfbdf12e22ac33dbbc1b78736094b4a2d4921dd163cd1697937cc7042b919345c79444257e53409e052adc98d69113719f9ffbace55c46cd69db88a4c3b79f0a6cddde52249c9325f186e6d73b811e94882ac0d6c67180e2c380b5bee3ed98214a0f70766ba6cf6b607f4219eb02fdd68b631b6160259909402722be784bdc7998409b53358beac32", @ANYBLOB="28810efd8f9446ea18f70702defc26ef56b5be1227ab59c19ac2fbed8b8e21339a8422a1a878bfda24a390c0ea9a564caf2f347ad75ab425ee582aa0846d902e67826bfbb7fdf783c951cf666108e21f1245872e41b48dd330e287a47176fe083315d698e3c45f86f7d8d5108fd3d9a8bbbea85866d5f11c58c066f43e411d16cae958ae3a5054671054b35e2a5b07a89e5eb55bf02a772f106d679e45f1ac266fb56c291e5062a15da26fbe0927ae03640a60461661c8329c7cd41ac570497e8208e044558ee27ad371946819456344c914496dcee98c4367"], 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @private=0xa010100}, 0x10, 0x0}, 0x3000e0c1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c5042, 0x0) sendfile(r9, r8, 0x0, 0xfffa83) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) close(r6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1m43.616735555s ago: executing program 4 (id=1066): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc27d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='host1x_cdma_push_gather\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) socketpair(0x2c, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x4) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000480)='\x00!', 0x2}], 0x1, 0x10001, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x6, 0x5, 0x2, @rand_addr=' \x01\x00', @loopback, 0x7800, 0x1, 0x1027, 0x44}}) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0xcc, 0x248000) ioctl$EVIOCGEFFECTS(r7, 0x80044584, &(0x7f0000000680)=""/242) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r9}}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1m42.884711309s ago: executing program 4 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x20, 0x40, 0x4, 0x5, {{0x15, 0x4, 0x3, 0x3f, 0x54, 0x68, 0x0, 0xb, 0x29, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x4e, [@private=0xa010102, @private=0xa010102, @multicast1, @broadcast, @private=0xa010101, @local, @broadcast, @multicast2, @rand_addr=0x64010100]}, @rr={0x7, 0x13, 0x5a, [@broadcast, @broadcast, @rand_addr=0x64010100, @empty]}]}}}}}) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000001cc0)={'erspan0\x00', r5, 0x700, 0x40, 0x3ff, 0x89, {{0x31, 0x4, 0x3, 0x38, 0xc4, 0x64, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x27, 0x2a, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @multicast2, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x2, [{@loopback, 0xdf35}, {@multicast2, 0x1}, {@empty, 0x2}, {@rand_addr=0x64010101, 0x8}]}, @lsrr={0x83, 0x13, 0xf7, [@multicast1, @rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010101]}, @generic={0x83, 0x5, "b4acc9"}, @cipso={0x86, 0x2d, 0x1, [{0x5, 0x5, "fd6046"}, {0x0, 0xf, "e0520b45ae7d827f69d58aa5a9"}, {0x5, 0x8, "e062feb94593"}, {0x2, 0x6, "2b96c2d4"}, {0x5, 0x5, "2bda44"}]}, @lsrr={0x83, 0xf, 0x40, [@multicast1, @local, @remote]}, @cipso={0x86, 0xc, 0x0, [{0x5, 0x6, "2676d947"}]}, @end, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x5084) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000400)={@rand_addr=0x64010102, @loopback, r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) r7 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x80010, 0xffffffffffffffff, 0xffffc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x100, 0x0) 1m42.057034217s ago: executing program 4 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332ebd7000000000ea140000000c009900040000003b0a000004003c80083afe4efcd6199fd2fd754a7d84f701d3e3e97fae499ebc20eb01e6052fce26f65b1412123aabfb6ea649e5c416453bcb9d1b4d03d0e69b525112d17f9756d3f292bd459845164addfa4bc765766b629e2a892f3702d055ca75f60b48bfa9"], 0x24}}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000d3f1c13607000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000018040000388f6abb7270cb9c147946fe0d633a85bdd96cabf8626ae7a9959ea5e365d959b7a6a0dbfbd9f5a837615bad0cecda483e872858d226e7ce0885cd83aa44350681256d508b41eb256916cb8757ee4e874fde983a392ae823ee1d192eb1c6fab3f4239faf1a138e2ac105ea3b4d0fa474ed4297b65b6fb97611fee0551395ad42c4317c33d332a600"/155, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x27e19de3f5005ad6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5f, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b0000000006001473"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 1m42.039369568s ago: executing program 33 (id=1082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332ebd7000000000ea140000000c009900040000003b0a000004003c80083afe4efcd6199fd2fd754a7d84f701d3e3e97fae499ebc20eb01e6052fce26f65b1412123aabfb6ea649e5c416453bcb9d1b4d03d0e69b525112d17f9756d3f292bd459845164addfa4bc765766b629e2a892f3702d055ca75f60b48bfa9"], 0x24}}, 0x40000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000d3f1c13607000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000018040000388f6abb7270cb9c147946fe0d633a85bdd96cabf8626ae7a9959ea5e365d959b7a6a0dbfbd9f5a837615bad0cecda483e872858d226e7ce0885cd83aa44350681256d508b41eb256916cb8757ee4e874fde983a392ae823ee1d192eb1c6fab3f4239faf1a138e2ac105ea3b4d0fa474ed4297b65b6fb97611fee0551395ad42c4317c33d332a600"/155, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x27e19de3f5005ad6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5f, 0x0, 0x0, 0x0}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b0000000006001473"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 1m31.680888414s ago: executing program 5 (id=1264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x20008801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpid() kcmp(r7, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r4}}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xfff2, 0xffff}, {0x8, 0x1d}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000840) 1m31.593957208s ago: executing program 5 (id=1267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x2000000000000163, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="701753e16e59"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/sctp\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) getdents64(r3, &(0x7f00000001c0)=""/45, 0x2d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r5, @ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r9 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x10, 0xfffffffe}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r12}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1m31.514046751s ago: executing program 5 (id=1270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0x7f}, 0x18) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f5, &(0x7f0000001480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) statfs(&(0x7f0000000200)='.\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf251300000044000180080003000000000008000300000000001400020064766d7270310000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f31000000004400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="64000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200697036746e6c3000000000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000400000008000100", @ANYRES32=0x0, @ANYBLOB="40000180140002006d6163766c616e3100000000000000000800030002000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003800018008000300020000000800030002000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d367265673100000000000000003000018008000100c95f83bad52fa467b9569c984ba87c6f092a3ad77af73acc4797da8f5bcf2371abd7cf939e60aaec6a91c48d1a035a21e3a463b749938d9eb8a113897cfa7960da7b7a201be8641a1390b596032620923ba441b14421839ae15baff72d6f600b7c89e1b2", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000003c0001801400020076657468315f746f5f62726964676500140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000440001801400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000200726f73653000000000000000000000000800030003000000"], 0x228}, 0x1, 0x0, 0x0, 0x40000}, 0xe518e92d100842ae) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeee1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x4092}, 0x18) r9 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3ab, &(0x7f0000000b00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @void, {@ipv6={0x86dd, @udp={0x2, 0x6, "b72751", 0x375, 0x11, 0x0, @loopback, @empty, {[@fragment={0x3a, 0x0, 0xc0, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x4, 0x20, '\x00', [@pad1, @generic={0xfd, 0x7d, "c05982bf9f2fc9b9403d41a517d5cc6cc62c0e754ce5a8e817f31ba59144005c072ed21d00d83ce7e9328860c40c2b5e829b2491bb7c43ccf6c31fc6c2b6dfd0c1fea67bd7adcb947bb925fde30a7357e6c6624d6e70cc87c5ebae39a8ea8ea1cd2d7e6a2e053d7f7690bcc30baebba62abcafa584096d5a24300c2a46"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x5, [0x8, 0x8001]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x2, [0xc4c, 0x1ff, 0x8001, 0xe, 0x5, 0x0, 0x345e000, 0xaf16]}}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}]}, @hopopts={0x73, 0x22, '\x00', [@enc_lim={0x4, 0x1, 0x24}, @generic={0x4, 0xec, "21edc9a5dd11177535c345acc0dc917babc59474e2de58453b371cc53f9356d3e459b0a89b1d471e3a4a4d67b53d6af9e3eec8926f4febf9ef4ae7da5651a67885d3c8bb66f01e3699f154f3c2285b8bfb982e12360a062f1edcfc70731cf7e66afa7b9227ed7436f0f944505e853e8d46955042f7c12c79008ae33db5286d04ca00117cc0d9d56a9445d313d424fc41124dd329a3a5a234d41abe7b57b5d01799ae13bc1853cb5d5090ca7676c34c4f8dc1558a33ba5d3845d70759342ca247b1c797ad2cc9b40d6cf6ccc0955c78efc42da5c9331ef17287165bd263fe3271080e9afb23bab4e715c7a8c9"}, @ra={0x5, 0x2, 0x9a6}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x4, [0xe07]}}, @ra={0x5, 0x2, 0xd}, @jumbo={0xc2, 0x4, 0x389}]}, @hopopts={0xa5, 0xc, '\x00', [@ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x6, [0x9, 0x4, 0x9, 0x20a, 0xfef, 0x1, 0x9]}}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3, 0x0, [0x6, 0x80000000]}}, @padn={0x1, 0x1, [0x0]}]}], {0x4e23, 0x4e20, 0xcd, 0x0, @wg=@data={0x4, 0x6, 0x6, "c87b91f7154a476fd5e5668f224668e5ca8bcd6e2aa10e1a53b9e12b95d47ffafe7fcdc6277d260b458b4f23f3bb7d7a1062ae90ee098e73fd4029b1d1c91c0c07dc670d76b13fbc177e249bb9b8cf1665698ddebd34d89e897230a5a3db1f35c0ef3d4b1d8392eb842d1c3d8bbf5544e70c9f57ea37929dfc6699285ac66f53bb8f8f5116809f5d989d3950d89f86acdb67865a56c019a821170baf427e7fc22ef7bf5e0c515e451aa2ca8aafe3b23a4bcc35a203"}}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000068000000008106907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0400080000000000000000000e00000fbcfe06e2d4c3d9fd09000000010000d5049233b07c0e907edb5f7a8213120c39e122bd2f7556512830127a3fa7b70000"], 0x0) 1m31.486624343s ago: executing program 6 (id=1271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x99089e6a87f181e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000100)=0x7) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES64=r5, @ANYBLOB="80d3c104d1ef8d82e05107a156010a85ecc58076534df270e8d996bc9329a192d27613c152d05a399234af7aa9f554a6628f08ee08cfb9ac29dc5ad4a4a19abd799f399b8f62afe7cdfbdf12e22ac33dbbc1b78736094b4a2d4921dd163cd1697937cc7042b919345c79444257e53409e052adc98d69113719f9ffbace55c46cd69db88a4c3b79f0a6cddde52249c9325f186e6d73b811e94882ac0d6c67180e2c380b5bee3ed98214a0f70766ba6cf6b607f4219eb02fdd68b631b6160259909402722be784bdc7998409b53358beac32", @ANYBLOB="28810efd8f9446ea18f70702defc26ef56b5be1227ab59c19ac2fbed8b8e21339a8422a1a878bfda24a390c0ea9a564caf2f347ad75ab425ee582aa0846d902e67826bfbb7fdf783c951cf666108e21f1245872e41b48dd330e287a47176fe083315d698e3c45f86f7d8d5108fd3d9a8bbbea85866d5f11c58c066f43e411d16cae958ae3a5054671054b35e2a5b07a89e5eb55bf02a772f106d679e45f1ac266fb56c291e5062a15da26fbe0927ae03640a60461661c8329c7cd41ac570497e8208e044558ee27ad371946819456344c914496dcee98c4367"], 0x20}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @private=0xa010100}, 0x10, 0x0}, 0x3000e0c1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c5042, 0x0) sendfile(r9, r8, 0x0, 0xfffa83) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) close(r6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1m31.405858357s ago: executing program 5 (id=1273): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @empty}}}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x38) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000005c0)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@block_validity}, {@dioread_nolock}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000300)='./bus\x00', 0x2200, 0x5d) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 1m31.12950388s ago: executing program 5 (id=1278): syz_pidfd_open(0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x3e, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206af", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 1m30.444734901s ago: executing program 6 (id=1281): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) unshare(0x24000200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x2, 0x25, 0x28, 0x1, 0x0, 0x3, 0x0, 0xa, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x90d9c302f7ecfd05, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000900)=ANY=[@ANYBLOB="e67afec5c3c4368f"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/13], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 1m30.23722236s ago: executing program 5 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) 1m30.155076544s ago: executing program 34 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x34}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) 1m30.102105796s ago: executing program 6 (id=1289): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xff5f, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 1m29.883992206s ago: executing program 6 (id=1291): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @empty}}}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x38) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000005c0)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@block_validity}, {@dioread_nolock}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000300)='./bus\x00', 0x2200, 0x5d) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 1m29.612631499s ago: executing program 6 (id=1294): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r2, r4}}, './file0\x00'}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x100, 0x30, 0xb, 0x5, 0x0, {}, [{0xec, 0x1, [@m_skbmod={0xe8, 0x9, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0xffffffffffffffff, 0x31, 0x9}, 0xa}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0x4, 0xfffffff8, 0x9}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_SMAC={0xa}]}, {0x4f, 0x6, "b670fd6e1fe8890f4ee533d5608802b5df7271d76bc9dc188f476ef3d3b854164507e32c7a28ba53e96af5f68a8ec80db516954bc40a3ff42e4b8cca818073059fbcb0c443bf00c6647821"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1m28.683924701s ago: executing program 6 (id=1301): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xff5f, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 1m28.659950373s ago: executing program 35 (id=1301): sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="e5786a0d000000000000003b", 0xff5f, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 37.585398201s ago: executing program 1 (id=1931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4b7, &(0x7f00000002c0)={0x0, 0x86e0, 0x1, 0x88}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0xffffffffffffff08, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r5}, 0x18) r6 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@inlinecrypt}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}]}) r8 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) dup3(0xffffffffffffffff, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r9], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 35.267544888s ago: executing program 1 (id=1955): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x38) r2 = open(&(0x7f0000000300)='./bus\x00', 0x2200, 0x5d) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 35.21678892s ago: executing program 1 (id=1956): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC, @ANYRES64=r2, @ANYRESOCT=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0xe, 0x401, 0x34, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0xffffffff, 0x9}}) (async) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) 35.144391633s ago: executing program 1 (id=1960): syz_open_dev$MSR(0x0, 0x80000000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3000204, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000008c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b90000009b80bfdddfe0fcc4f1b248f5ff00", [0x4]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 34.991431521s ago: executing program 1 (id=1963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 34.657166826s ago: executing program 1 (id=1967): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x38) r2 = open(&(0x7f0000000300)='./bus\x00', 0x2200, 0x5d) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 34.655987316s ago: executing program 36 (id=1967): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x38) r2 = open(&(0x7f0000000300)='./bus\x00', 0x2200, 0x5d) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) 33.304601049s ago: executing program 7 (id=1989): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001980)={0x28, 0x18, 0x1, 0x0, 0x25dfdbfc, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x20004810) 33.247459172s ago: executing program 7 (id=1993): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3c9PXFsdAPDvDL8GHn3wnm+hRm2t1WqaDjBtSdOF1pUxpomxS01ahCkhzDCEGWrBLuj/YGITV7r0D3DdlXs3Rndu6sLEH0RTmrgYc+9c6BRmChXKEObzSW7vPecO93sOcM/pfIeZE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtq+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxkkbSf4f24kT2Pf/BhwjWAwMRMZj9/mQu9LI9vJ98RHwaEZfT+38iBtKfJgBwnjWbE9GcaC8DAOddPs2B5fLFLBcwHvl8sdjK4X0WY/lKrd649qi2vrLQypVNxlD+0VKlPJ3lCidjKJeUZ9LjN+XSvvKNiPgkIn4xMpqWi/O1ykIv/+MDAH3so33z/39GWvM/AHDOFXrdAADg1Jn/AaD/mP8BoP+Y/wGg/5j/AaD/mP8BoP+Y/wGgr/zw3r1ka+5kn3+98Hhjfbn2+PpCub5crK7PF+dra6vFxVptMf3Mnuph16vUaqszN2P9yeS3V+uNqfrG5oNqbX2l8SD9XO8H5aFT6RUA8C6fXHzx51xEbN0ZTbdoW8vBXA3nW77XDQB6ZqDXDQB6xmpf0L+O8RxfegDOiQ5L9L6lEBGj+yubzWbzwzUJ+MCufkH+H/pVW/7fXwFDn5H/h/7VNf9/4Mk+cN40m7mjrvkfR30gAHC2yfEDXV7//zTb/zZ7ceAnC/sf8Xx/hXcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D921/8tZit3jEc+XyxGXIiIyRjKPVqqlKcj4uOI+NPI0EhSnulxmwGA48r/LZet/3V14sr4/rPDudcj6T4ifvar+798MtdorP0xqf/XXn3jeVZf6kX7AYDD7M7T6b7tifyr7afzu9tptufv342IQiv+zvZw7OzFH4zBdF+IoYgY+3cuK7fk2nIXx7H1LCI+36n/uRhPcyCtlU/3x09iXzjV+Pm34ufTc6198r343Am0BfrNi2T8udvp/svHpXTf+f4vpCPU8WXjX3Kp+Z10DHwTf3f8G+gy/l06aoybv/9+62j04LlnEV8cjNiNvdM2/uzGz3WJf+Xg5Tr6y5e+crnbueavI65G5/jtsaYa1dWp+sbm9aXq3GJ5sbxSKs3OzE7fvnGrNJXmqKe6zwb/uHPt427nkv6PdYlfOKT/Xz9a9+M3/33446++I/43v9Ypfj4+e0f8ZE78xhHjz439rtDtXBJ/oUv/D/v5Xzti/Jd/3TywbDgA0Dv1jc3luUqlvObAwdk/SH5lz0AzOh5857RiDcd7fVWz+X/F6jZinETWDTgL9m76iHjd68YAAAAAAAAAAAAAAAAdncY7lnrdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6v/wUAAP//EeDSew==") 32.824784552s ago: executing program 7 (id=1998): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) unshare(0x24000200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x2, 0x25, 0x28, 0x1, 0x0, 0x3, 0x0, 0xa, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x90d9c302f7ecfd05, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="e67afec5c3c4368f"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @void}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/13], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000018110000009ebf05e1b78072ce1cc68f9886eacd0a8acf6bfcc1f4b7de9d4f8a56a9ec42c0e236428d54038ba1f11ad3fff88ed69d1c33cee5b4dad825ab8d0e5df6ee94725525fb19", @ANYRES32=r8, @ANYRES32=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 32.499863567s ago: executing program 7 (id=2004): syz_open_dev$MSR(0x0, 0x80000000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3000204, &(0x7f0000003240)=ANY=[], 0x1, 0x346, &(0x7f00000008c0)="$eJzs3E9oI1UcwPFf/jZJaZODKArSh170MiTRsxikBTFgaRuxFQrTdqIhY1IyoRIR2568indPgofSY28FLXjuxZtevHjLRfCwZVk2y/xr/rZJs+mm234/sMyb995v5r28yfKboZPm5z9+XS5aWlGvSzCmJCAiciGSkqD4At426JSjXZUH8u7s/3+9ubq+8Ukun19cUWopt/ZeVik1v/DbN9/FvdDTGTlPbTb/y/57/ur5682na1+VLFWyVKVaV7raqv5T17dMQ+2UrLKm1LJp6JahShXLqLntVbe9aFZ3dxtKr+zMJXZrhmUpvdJQZaOh6lVVrzWU/qVeqihN09RcQjCEvaArem7M6O0Jjwa3pFbL6SERife1FI6mMiAAADBVvfl/0E7pR8n/Pe38X+ad/N/u3M7/j986q89+djJ/asduNk+jg/L/9/92j9WV/8dE5Kb5f+YPkZ/lBvl/f0b0sBSOVsbP/3E3LET7qgJde3b+n/C+v47DL47TToH8HwAAAAAAAAAAAAAAAAAAAACAl8FFq5VstVpJf+v/a79C4O3jXrpq/WdEJGavfov1v89W1zck5ry4Z6+x+cNeYa/gbr0OZyJiiiHpiLPbumSX/TePlC0lv5v7TvxjextyWnJFKTnxGUlKyo0PeVF2eenj/GJGubz4y9eUEp3xWUnKK73nd+Oz3fH2+Pf3ClF55+2OeE2S8ue2VMWUHefc7fjvM0p99Gm+Jz7ungQAAAAAgHtAUyrg3T6nuu9/3bt0TVNqcLv7KyO5ovOYyJC0JOXJ4Pvz9MD783DyjfC0Zw8AAAAAwMNgNb4t66Zp1K4pxGV4nzELQSmHR+sc7amJXNc51DHDUccTdR5kiDzvvH4Z8VPtKvh/SNHVFPMqxxuPP/+JrdeBVwiIu3DDo8K9g1+wK9QNz37oTeSyxn9sFL3ic5bl/uMEr7kSIhO7nl/76ddHk/uCfHDiXwHDOx8OO2D8igsp1nvVOYXIbf+/AwAAAODFayf9fs2Hnc2BqQwKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAHZvI/6ddfmPYcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLviWQAAAP//sJzvLQ==") open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000005440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b90000009b80bfdddfe0fcc4f1b248f5ff00", [0x4]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 32.364551054s ago: executing program 7 (id=2009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 32.027610459s ago: executing program 7 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) setresgid(0xee01, 0x0, 0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 31.995306911s ago: executing program 37 (id=2014): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) setresgid(0xee01, 0x0, 0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 2.53721899s ago: executing program 8 (id=2482): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@bsdgroups}, {@jqfmt_vfsv1}, {@nolazytime}, {@noblock_validity}, {@grpjquota}, {@jqfmt_vfsv1}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0800080007000000000014000000456f0f3400660000401190780a010102ac1414124e204e200f20907887fc4f59a62c5eadc88f3aa9e2df2e42c413481ed8b4b413ad0b87968879dff2940d80b7147f9bf0e76c4e7e4ba1983424ed389c5355ce2bd1e909e11536c5a1b02c3e52b6257a6ecee2538f66e677156ec259fe39320f95371d1a37fae1f742b2f2d8f616165f5fab0d0f4f9c51046185130e6f7bc3cec0fee91658ab50c1b162d03b242d25721028995c7a4f16faa8caab13eba067e930d982dfb132a631ebd031a8963707088fe883e5a142945f0ed074db0f3ac69b6b31706566d972108f42bc14ab1a57a1eaf44695292dd098c42be4a67da8ab94b4335068a70dd7b51a75504e6b124b5ad4ce6f72185a876f33214991c37805efae973ea1929662d498954915b7d2b5737d910fefbda426ccd44e11291bcb19e88ba590d3e68cb4fb8de6513d6a9d325e9b485668238608ae58c50d2dba2b1501984a65d3431c1aab5dcc78ae8b11694ed870dd844c3c2ea745f35933fbd1fc76bc894098f60ad99e57b6509371595c4e6814a0a4c4cecc489bc52ad114dabc95b53d700b000cfe81af8d3184ed1c66287759e32fd5f960284f297d6f531f08a516da884982df755bdfc0450741e986e0ffd4a33fa6dcbf374827bc9d0c0b1ce667b8f834c5d792543f180d0cc79cff54386dd8a81d4911865a5f32fc23ab092986845e165867144091ba6c3ceb7849c3124364914636d1e8ada13644a4e76ac98fea040b4c99cfb8ec4420392afbb19064f0782befb395bc0fbd070a0251f2b837bb229415e8fe362644da417b5ae3593758e02bc69d8c85462aca3336c58137f3bc4c849989b61abd15ddedb754898326419ae42b32caf80c047b60a837e97fc39f9a552c3030962e4143b3da2730aa3f4bc4ea7ad5391b626bff6f6b250d6ffb749c372c3eadbfdda945e1e69376ad7c218cef56a1a432a59dc6cdd843ea92fa6063c4450cbe01d87c68cf26789a7673f82d18b069568ac9a21a444174f81b181ceedb3988d302ea3a00b2b3236a7c9174c847d116dcf4d953267c888a6abf52228431546d0ac3e82b9a5729481e1a511fe0d9656f62bc0a3dce58dc5361799d952216c4ec68bdb8df49cc7baceff9b212cfa54ee1f9de88611f2f74f0961cc2d555de0462c325fecbd1b2255af2dcac7d514cc2e580c3610bea57e927ef978c88c088399d52a7fb97793645811f5606622f65df20f9ea3c07a7a165bc44371a65e22d7b8e07628e551933325dab6711d38d57fa53fd05e5406b5f7ff310bb4fcf1fab762fd1c602b4a8690d9e84a9b852ddbfbd35ed0685ead6ff0cfb950ef8e1f5cf0c714d02fe1e4b52df4191c302d7e5af0173b303f532b063a023ef5600b49023228907ad411a368b9d9ec2612fb8c1b3a906d06fc7140c148d70b820ba027fc854cf988c810ad71398efb3e1193551592ab49659ec669bee7732ee34f4da6962b8daca427d504510416234604e41d4c9f28324b0e5757d56d8989257b1aa47947de13539f6966de7cb7345cf8a9a7d722716e91e8431c7f45e2f8379600b93aab4d626127dce48d6d032eb01daf11a07be0a86004932db1d1db04baf400b6e7cfeaed8e52e5c41d19c174ca8279390d2e0104a162095601b852415e3233468a33ff8892449c081e7ba634d471430fbe54803b518f0cce7de2e8ed5776604d67649744faa1b63d88d54957fbc4f92c62002d66a5a077a7ef489c8c155629c2c11e03209e14539e58a8bd1cd2ea2c49e0bf95ca56919408aa2b0ab0ebdd5cbf0edf257c6ad180cf5f2a8041e344146f1d66af9023d2a48d8af568381ad427cfa9765e9b66ed65535c16711a9612c21f219cb0f6593e5979487843a7d4c7d3d1c0e51c6860feae5283079431523cc7af218ab5ad50f8c1c12f672363397f10ecbd1e032d9d2491f88f13d7d49d59940e4f919169230504c26242a31ac8896fd07def426c73fdf93ff57c90da9fdc20fb1bc5df88d61464e8bb5c233330e7e7d729535a43548e2f14886757701c16074802a88c0bbeb3034176b0ea9fadad0d4b834839baab1b06a022d604ee4dcda9569b597425e8cb1c3043d4998cd9a2132c042af0a39f8b020adb051342fd228f0f42764dd37ef21b198657e9b8d1dfdc170153bca22a71dc1aa97403554c60fb28bae22df5d4b97ee0c02ee3d1216153616fe47b8fc015c759ab7f1e8468385272cfc0a19edaca086b9d6e55668a916bd4415a3d2bda6ae1b223225469bad053ef0c61521354d23f7fab5a13163cf254b4346e843e657196330aae526174dcd4368f686768cc638e40d00232bb13daf02a39dd3e3591081955c68865e92fbca6bc6f96218d6acb45ce9d7ef5c645ba709a42e9e933183f7b43557290802bea8fbef9aab1ec2ba79aae6a7b5f9f061cdf41e3500aed339b9780be89ef9aad5cbeadc773e099bf4e38b8720ddabfd24e74811686470278ce8f295a0549641f42db105a052fa20598e113c32d5671753069093341fee0281afa39952c8cbe3a14ef9a6b818f1e3137405a0d92516acbacbe628d422728a79ae6f7c60976efa62a9dc5719d5b112037cdb6a2380b23da820b2390c2e14fa33e5861144a7b3850a6eb4c93e71483bd6e738bed3dd33047079f52ce21ddbce4d5a19eaa3b9bf65a4161722ad40eb81109ff213872d66d359c9c8dacedf3ce5621b6da67511cc8dde5ea11b6eac39773ea7161ce0a204aa1038e67917bfe827c192dc8d631a057f30d59a22508874a2bea00aaaa88d5c9ff3cc74cdd0cc84f00bd9029c2324ffce8aa2b1ee374b93df2385e09c35194b8241d2d2c8d09d06487b87e2e3512d87a9bf3498056f61f1d26edb74a858d388a4bf72a0463a458843024bd797b1aad62978c787bb1bf4dad932b6c70ea7fcc3a5b376062d2a53c3a2937d773200270af28750359cc01680ff3b3cb3adc5f965081b95691e07230eaac3232a8cbb58b085669915d99eea66031ce47eec8fe035d082cbdeca050893ef599791cffe0932f9142304a34fc27b27663c661bd8e0ccd67bda2d156a653dedde863aaa046f74ea5981f5c5e4e7cce886e9d5438bcb7a76a39ca3b6be416adf255aca4842273eb2af4f28ad8f38f4354bb98c922e947ed5a57c18e10b946fcbbc21d1b590cea5a96d37346a5347584b28f0e603bf4fd63c7e8c464ec21ba5a360b8e2492394ac464dac98cc2ae874b3fdd771bad3ae91e251c9d9c7a4029375ca2311ccd160d6464dbb623af2590742bdad317e4dab9b38f66de6bcbbcac81393aac2afada1a699719d527d6c33efb8851f059710ac252fd9cf629d00303e0de72ed253025c3b5936cd9a097101436839d4605d612270038cf72c49f88cece8b2c07dd1b55ac3d61e7b7296e3f6eca7645e386af515b5edc4fa4cd9c6c24cf4d6d5b8c7b347db2e7f573246ea1c784069b9f05d2ab7ad1d0b0bba02f4f8e2ffce0dfa1aeb3e5084e45866e128077d41c65d189d26762baf2ba57c0bca6a07428f65a3304beefa22ebbd9ec621f7157f6bae3558e3f6a2fe7336110249902cbb6796965b148cdcb49b1fa8b5fbfb92e44a77d5c3ec283fbc7e3426b08c12103646da65d4d4d82dc2b7ebec2a5018a45115d4ceb9592e00ca13c1883206764a131cc04955a34d7925daa75b1e084eaaeb997447f8c9f824e76c4366221b727c6a3f680257c49756e56472d5d1fff202ade95cd72a278a00faccd614d54ff94446b3106c1208384ce9cb13b2483ed3661e9f79cf25cd7800774c25a99ceaa6987f25db903892ff073d3dfa960cf047c1883189837ec0184ff6c3e8763969f9c63b649445acb6da3d13b620e558ec5afcffe44cf989fa200fd34fc2226beabcf7d6d8582d17a6587040d23049ccce46916d7ef6817c1118c575fd18d3082c5ee4f305a55839c857e1fb8069fbf6ea1679b3a43cda21278f0380513fd667f665dbb73e15bf18ea2adaef0ca7e1b5e881485cefd36c946953add33fcfccf8bebfe36173e6895e88fed86d01472cdc7a5fc1730302c309a57989f8b220f61d39adf10ba47cbd6b8c753f71940410900b90267a42b122d5055679a7af3d3979d49367cdd0fa28a98afed14eb52e10062f563c02f3e58fb9bda3704256b2d06d1306e7f9c961297cc7741271159fa215d0da5e1d9e2a72a1e5b82fe10ca097973d2f54a9b704dd85dafb7285c35ef2e73aac620010c4f1a7cf26dec90ae26adde4d843aebf621eaee4bef72d4fc2590561d6635b3411c3222c5c45353a1f090f8e1a3b674336bd34c3ec4744cd305fbd25a49f4eadf60282f17574ec073a6befefcc1647c09e56c6607813e7d8b720fe6e74a6a11557b3e58f16da069488b3ac1fefc3d8c19303b88263759991dd96eeefd43e4e0fa93f6d552afd4ca3124a766ca71a2809995ed896812e25175ad6f118cc923c82793faa93cb32bda6bab59ca31cc66c54a786f7ae331931939b68899179e57da19fb381d88ac8e40f3e61177d796958c23c3b320637c94be9b1d0d9bbbdf2816e1059f275ec5b7eb57bc1be884d449e86a08137383b9e9354e272978a3fdc3d058e2e0510daf63f5bd73441e07ff316107cd6f9df1b0fa9ddbc2ba8b14af6e3288e88eb27e4354453f85f44acfa568936c54956223499832fd12bfa5650a26df0c6b57d4d12e20b2d4369c8b7ebe003e3f2a2b95d2e882a0dec93574aebcbfa94b92751e66f4b63aafb230bbb654a7ffa426f5a3eff56ad37dd5481f2b15d42ce420f14d048d973b264e6c24dd4c844f368e307c436267db59e09358ce65abf65e4bb866799027f64eec1cc57f384d15242922ad46eba3f6487709d1deb79b63fc03bef4a5b0658016094264975da59642bfd3c80b1f8c92c3b1adb763eec6d5b8545e0ab902f7c6ce0cf0a87adc896fd2b7be668b45eef83c50bcd4eaec78750a876868db2e24dd18d5c462bf20dad382d37b803e129ac6d6cde63981d81e6c161ba597f00de425bad2a3eaf9844bf44510b4f5f39564be3f60e2f1e0b18f4b3a9662e0e5116a623c7696929abfa5971ce4c8f79c098a669202aa47519ebf1c8d49a71e03bf7930d77ca78308d998b5db2680b0fde9d9b26030185e21ec07f90bd659cb6833591cc41ece39b2d19a0798b77d200178da7a311210b67ec23753bf6ead47c39222db8208df801a22d1a5dbbaa1bfe7a81da3785ed3040fe95992805282140af754fc818338f8de0c43a494279be53c0f49736974e83fa88c4ea02a39852667efd9bdc77b187829167f606ba5ddc62dab647d642d2e8d719ea4b103cd60eb19b7204aa3861aeea151b1b2ed69f24baa6e376e93917edbf1070ae4cecaf0f43cbc638eace835bdd0276442337d13dcb679a47182c86e5fca119b2d09e43803bbbb80bc6a5b4967d63aa9e9535e09f6aace56a89955ff4a906e9ffe89fd35c6a6ffff47e9e620b24682ffc6d9ece798cefe5d54f391f7cc32670c219e59e90f04522f09485"], 0xf42) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10000003}, 0x4000) 1.90653992s ago: executing program 9 (id=2493): syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x65) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 1.900903021s ago: executing program 3 (id=2494): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@bsdgroups}, {@jqfmt_vfsv1}, {@nolazytime}, {@noblock_validity}, {@grpjquota}, {@jqfmt_vfsv1}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10000003}, 0x4000) 1.825960224s ago: executing program 8 (id=2495): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1.628085264s ago: executing program 8 (id=2496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0xc0800, 0x0) 1.116764317s ago: executing program 8 (id=2500): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c0001", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) unshare(0x24000200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x2, 0x25, 0x28, 0x1, 0x0, 0x3, 0x0, 0xa, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x90d9c302f7ecfd05, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="e67afec5c3c4368f"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @void}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/13], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000018110000009ebf05e1b78072ce1cc68f9886eacd0a8acf6bfcc1f4b7de9d4f8a56a9ec42c0e236428d54038ba1f11ad3fff88ed69d1c33cee5b4dad825ab8d0e5df6ee94725525fb19", @ANYRES32=r10, @ANYRES32=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 1.075342349s ago: executing program 3 (id=2502): r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x54129, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x100280, 0x1, 0x3, 0x1, 0x0, 0x10}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000240)={&(0x7f00000004c0)=""/132, 0x84}) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1, 0x0, 0x0, 0x48080}, 0x48080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000001000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x4, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 981.454484ms ago: executing program 9 (id=2505): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 948.443745ms ago: executing program 0 (id=2506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001980)={0x28, 0x18, 0x1, 0x0, 0x25dfdbfc, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x20004810) 947.918175ms ago: executing program 2 (id=2507): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)={0x1}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 923.371467ms ago: executing program 8 (id=2508): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000200), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r6, 0xffffffffffffffff, 0x0) write(r3, &(0x7f0000000100)="1c0000001d005f0214cfecfffffffff8070000001d00000004001d00", 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r9, 0x308000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r10}, 0x32) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000700)="b9264fd8bc21ac1546dfb65337ff", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111208f000000008510000002000000850000007d00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) 886.148809ms ago: executing program 3 (id=2509): unshare(0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8, 0xf}}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xbeb1dfa7512b8a13}, 0x20000800) 769.936574ms ago: executing program 2 (id=2510): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 737.360046ms ago: executing program 9 (id=2511): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fea000/0x1000)=nil, 0x0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@bsdgroups}, {@jqfmt_vfsv1}, {@nolazytime}, {@noblock_validity}, {@grpjquota}, {@jqfmt_vfsv1}, {@errors_remount}]}, 0x11, 0x565, &(0x7f0000000440)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10000003}, 0x4000) 716.459836ms ago: executing program 0 (id=2512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 676.387048ms ago: executing program 2 (id=2513): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 675.902458ms ago: executing program 3 (id=2514): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 640.93158ms ago: executing program 0 (id=2515): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 599.716242ms ago: executing program 3 (id=2516): syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x65) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 553.883194ms ago: executing program 2 (id=2517): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x440c0) 553.178794ms ago: executing program 0 (id=2518): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c0001", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) unshare(0x24000200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) perf_event_open(&(0x7f0000000000)={0x2, 0x25, 0x28, 0x1, 0x0, 0x3, 0x0, 0xa, 0x440e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x90d9c302f7ecfd05, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000900)=ANY=[@ANYBLOB="e67afec5c3c4368f"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @void}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000400"/13], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000018110000009ebf05e1b78072ce1cc68f9886eacd0a8acf6bfcc1f4b7de9d4f8a56a9ec42c0e236428d54038ba1f11ad3fff88ed69d1c33cee5b4dad825ab8d0e5df6ee94725525fb19", @ANYRES32=r10, @ANYRES32=r6], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 489.437737ms ago: executing program 2 (id=2519): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 477.252408ms ago: executing program 0 (id=2520): syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x65) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 473.538128ms ago: executing program 9 (id=2521): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='tlb_flush\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 379.111392ms ago: executing program 2 (id=2522): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) (rerun: 32) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x84}}, 0x0) (async, rerun: 32) mknod$loop(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) (rerun: 32) 278.381517ms ago: executing program 0 (id=2523): syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x65) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/253, 0xfd}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 277.431107ms ago: executing program 3 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x1}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="79cfb2b43c3bcf7fa9a923067a911af01b6fd09473b6a2d1331464f3213cddec6ad5630f97fe9308d5cd5b6975958a020d3b1fd4f2a647d5be29cc9e4649db91280187669a48063c975dd619750ccc5751244e48d93b8130827eca453683f5a0f3c5f680595784f9dfa8df849f16e4ca356dceeb647a5220583a", 0x7a, 0x4000040, &(0x7f00000004c0)={0x11, 0x15, r3, 0x1, 0x1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYRES8=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='virtio_transport_alloc_pkt\x00', r5, 0x0, 0xfffe}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='svc_alloc_arg_err\x00', r11}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYRES8=r5, @ANYRES8=r0, @ANYRESOCT=r7, @ANYBLOB="bf8f4c9810c08424a4b1f2cb18e1bb3d5b48b1d779b9079af124694079"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r13, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r14}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) 57.062258ms ago: executing program 9 (id=2525): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 32.634209ms ago: executing program 8 (id=2526): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 0s ago: executing program 9 (id=2527): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a000b000140020003600e41b0000900ac0006fc1100000016000500015702000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4490000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5825ccca9e00360db798262f3d40fad95667e006dddf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d910b0000004b07540d3b1d71bb3f6f1620", 0xd2}], 0x1}, 0x40840) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.406112][ T7470] loop7: detected capacity change from 0 to 1024 [ 110.452023][ T7470] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.485977][ T7470] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #3: block 1: comm syz.7.1350: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.500520][ T7470] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1350: Failed to acquire dquot type 0 [ 110.513013][ T7470] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.1350: Freeing blocks not in datazone - block = 0, count = 4096 [ 110.526846][ T7470] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.1350: Invalid inode bitmap blk 0 in block_group 0 [ 110.540591][ T7470] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 110.549455][ T7470] EXT4-fs (loop7): 1 orphan inode deleted [ 110.556484][ T7470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.583529][ T3683] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.716312][ T3683] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:61: Failed to release dquot type 0 [ 110.753243][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.788522][ T7474] pim6reg: entered allmulticast mode [ 110.801910][ T7474] pim6reg: left allmulticast mode [ 111.051535][ T7485] loop8: detected capacity change from 0 to 128 [ 111.061069][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.091973][ T7485] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.307313][ T7485] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.636544][ T7254] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.956645][ T7521] loop7: detected capacity change from 0 to 512 [ 112.970580][ T7521] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 112.988533][ T7521] EXT4-fs (loop7): invalid journal inode [ 113.000646][ T7521] EXT4-fs (loop7): can't get journal size [ 113.016167][ T7521] EXT4-fs (loop7): 1 truncate cleaned up [ 113.039638][ T7521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.136604][ T7530] pim6reg: entered allmulticast mode [ 113.198208][ T7530] pim6reg: left allmulticast mode [ 113.222696][ T29] kauditd_printk_skb: 2588 callbacks suppressed [ 113.222713][ T29] audit: type=1326 audit(1766126657.578:23882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 113.265835][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.275586][ T29] audit: type=1326 audit(1766126657.608:23883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 113.299456][ T29] audit: type=1326 audit(1766126657.608:23884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 113.322984][ T29] audit: type=1326 audit(1766126657.608:23885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 113.346458][ T29] audit: type=1326 audit(1766126657.608:23886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 113.370061][ T29] audit: type=1326 audit(1766126657.608:23887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 113.393839][ T29] audit: type=1326 audit(1766126657.608:23888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 113.417344][ T29] audit: type=1326 audit(1766126657.608:23889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 113.440836][ T29] audit: type=1326 audit(1766126657.608:23890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 113.464516][ T29] audit: type=1326 audit(1766126657.608:23891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 113.542870][ T7540] hub 1-0:1.0: USB hub found [ 113.547874][ T7540] hub 1-0:1.0: 8 ports detected [ 113.648306][ T7553] loop8: detected capacity change from 0 to 512 [ 113.671631][ T7553] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1380: bad orphan inode 15 [ 113.682556][ T7553] ext4_test_bit(bit=14, block=5) = 0 [ 113.693873][ T7553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.869983][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 113.975804][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.185622][ T7583] loop8: detected capacity change from 0 to 764 [ 114.236670][ T7589] loop8: detected capacity change from 0 to 512 [ 114.247233][ T7589] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 114.266705][ T7589] EXT4-fs (loop8): orphan cleanup on readonly fs [ 114.280134][ T7589] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.1391: corrupted inode contents [ 114.293861][ T7589] EXT4-fs (loop8): Remounting filesystem read-only [ 114.300553][ T7589] EXT4-fs (loop8): 1 truncate cleaned up [ 114.306857][ T3628] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.317666][ T3628] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.328737][ T3628] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 114.341402][ T7589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.371460][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.466177][ T7606] loop8: detected capacity change from 0 to 128 [ 114.472932][ T7600] pim6reg: entered allmulticast mode [ 114.479013][ T7600] pim6reg: left allmulticast mode [ 114.521545][ T7606] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.547392][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.552891][ T7606] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.568173][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.601771][ T7616] hub 1-0:1.0: USB hub found [ 114.606878][ T7616] hub 1-0:1.0: 8 ports detected [ 114.629137][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.638844][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.642279][ T7254] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.666277][ T7618] hub 1-0:1.0: USB hub found [ 114.688735][ T7618] hub 1-0:1.0: 8 ports detected [ 115.248634][ T7674] FAULT_INJECTION: forcing a failure. [ 115.248634][ T7674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.262043][ T7674] CPU: 0 UID: 0 PID: 7674 Comm: syz.8.1420 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.262078][ T7674] Tainted: [W]=WARN [ 115.262085][ T7674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.262143][ T7674] Call Trace: [ 115.262152][ T7674] [ 115.262161][ T7674] __dump_stack+0x1d/0x30 [ 115.262190][ T7674] dump_stack_lvl+0xe8/0x140 [ 115.262212][ T7674] dump_stack+0x15/0x1b [ 115.262282][ T7674] should_fail_ex+0x265/0x280 [ 115.262348][ T7674] should_fail+0xb/0x20 [ 115.262372][ T7674] should_fail_usercopy+0x1a/0x20 [ 115.262401][ T7674] strncpy_from_user+0x27/0x260 [ 115.262552][ T7674] path_setxattrat+0xeb/0x310 [ 115.262592][ T7674] __x64_sys_lsetxattr+0x71/0x90 [ 115.262618][ T7674] x64_sys_call+0x2ef0/0x3000 [ 115.262686][ T7674] do_syscall_64+0xd8/0x2c0 [ 115.262728][ T7674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.262753][ T7674] RIP: 0033:0x7ff8c49ff749 [ 115.262771][ T7674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.262792][ T7674] RSP: 002b:00007ff8c345f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 115.262816][ T7674] RAX: ffffffffffffffda RBX: 00007ff8c4c55fa0 RCX: 00007ff8c49ff749 [ 115.262898][ T7674] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 115.262912][ T7674] RBP: 00007ff8c345f090 R08: 0000000000000002 R09: 0000000000000000 [ 115.262927][ T7674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.262940][ T7674] R13: 00007ff8c4c56038 R14: 00007ff8c4c55fa0 R15: 00007ffc2445a9e8 [ 115.262961][ T7674] [ 115.600495][ T7688] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1426'. [ 115.611788][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1426'. [ 115.620813][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1426'. [ 115.737356][ T7697] loop1: detected capacity change from 0 to 512 [ 115.779821][ T7700] hub 1-0:1.0: USB hub found [ 115.786318][ T7697] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1429: bg 0: block 248: padding at end of block bitmap is not set [ 115.807619][ T7700] hub 1-0:1.0: 8 ports detected [ 115.816873][ T7697] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1429: Failed to acquire dquot type 1 [ 115.893035][ T7697] EXT4-fs (loop1): 1 truncate cleaned up [ 115.899287][ T7697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.949644][ T7697] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.998351][ T7697] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.084397][ T7722] loop8: detected capacity change from 0 to 512 [ 116.124752][ T7697] syz.1.1429 (7697) used greatest stack depth: 9088 bytes left [ 116.139889][ T7722] EXT4-fs (loop8): too many log groups per flexible block group [ 116.164106][ T7722] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 116.172629][ T7722] EXT4-fs (loop8): mount failed [ 116.250044][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 116.257667][ T7732] hub 1-0:1.0: USB hub found [ 116.259295][ T7733] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1438'. [ 116.263940][ T7732] hub 1-0:1.0: 8 ports detected [ 116.272897][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 116.292466][ T7734] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.299997][ T7734] vhci_hcd vhci_hcd.2: invalid port number 96 [ 116.306258][ T7734] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 116.429940][ T7736] pim6reg: entered allmulticast mode [ 116.441714][ T7736] pim6reg: left allmulticast mode [ 116.460167][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 116.625977][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'. [ 116.656996][ T7744] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.673791][ T7744] vhci_hcd vhci_hcd.2: invalid port number 96 [ 116.680009][ T7744] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 116.749115][ T7760] loop8: detected capacity change from 0 to 1024 [ 116.756708][ T7760] EXT4-fs: Ignoring removed bh option [ 116.772939][ T7760] EXT4-fs: inline encryption not supported [ 116.779494][ T7760] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.801336][ T7760] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce028, mo2=0000] [ 116.813283][ T7760] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.1449: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.826967][ T7760] EXT4-fs (loop8): Remounting filesystem read-only [ 116.833803][ T7760] EXT4-fs (loop8): 1 orphan inode deleted [ 116.840336][ T7760] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.853188][ T3646] EXT4-fs (loop8): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 116.864030][ T3646] EXT4-fs (loop8): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 116.884131][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.892521][ T3646] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 116.925842][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1453'. [ 116.935419][ T7769] loop8: detected capacity change from 0 to 764 [ 117.090388][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 117.229983][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 117.330024][ T7804] team0 (unregistering): Port device team_slave_0 removed [ 117.367198][ T7804] team0 (unregistering): Port device team_slave_1 removed [ 117.409584][ T7804] team0 (unregistering): Port device geneve1 removed [ 117.580837][ T7810] loop7: detected capacity change from 0 to 128 [ 117.877042][ T7810] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.969179][ T7810] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.130597][ T7206] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.221999][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.243335][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.266044][ T7843] loop7: detected capacity change from 0 to 764 [ 118.272534][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.288906][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.328100][ T7844] loop8: detected capacity change from 0 to 1024 [ 118.362315][ T29] kauditd_printk_skb: 1170 callbacks suppressed [ 118.368705][ T29] audit: type=1400 audit(1766126662.718:25049): avc: denied { map } for pid=7828 comm="syz.2.1476" path="socket:[21962]" dev="sockfs" ino=21962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.392352][ T29] audit: type=1400 audit(1766126662.718:25050): avc: denied { read } for pid=7828 comm="syz.2.1476" path="socket:[21962]" dev="sockfs" ino=21962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.519486][ T29] audit: type=1400 audit(1766126662.868:25051): avc: denied { write } for pid=7847 comm="syz.7.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.058177][ T29] audit: type=1326 audit(1766126663.408:25052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb607965e7 code=0x7ffc0000 [ 119.265257][ T29] audit: type=1326 audit(1766126663.448:25053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb6073b829 code=0x7ffc0000 [ 119.289148][ T29] audit: type=1326 audit(1766126663.448:25054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb607965e7 code=0x7ffc0000 [ 119.312730][ T29] audit: type=1326 audit(1766126663.448:25055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb6073b829 code=0x7ffc0000 [ 119.336276][ T29] audit: type=1326 audit(1766126663.448:25056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 119.360169][ T29] audit: type=1326 audit(1766126663.448:25057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 119.383750][ T29] audit: type=1326 audit(1766126663.448:25058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7860 comm="syz.1.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 119.630518][ T7844] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.829357][ T7863] syz.1.1485 (7863) used greatest stack depth: 8592 bytes left [ 119.882499][ T7844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.919539][ T4571] hid_parser_main: 7 callbacks suppressed [ 119.919558][ T4571] hid-generic 0000:0003:0001.0002: unknown main item tag 0x0 [ 119.932962][ T4571] hid-generic 0000:0003:0001.0002: unknown main item tag 0x0 [ 119.976648][ T4571] hid-generic 0000:0003:0001.0002: hidraw0: HID v0.03 Device [syz0] on syz1 [ 120.008117][ T7872] loop7: detected capacity change from 0 to 512 [ 120.018040][ T7873] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 120.076012][ T7872] EXT4-fs (loop7): too many log groups per flexible block group [ 120.111333][ T7872] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 120.137635][ T7872] EXT4-fs (loop7): mount failed [ 120.403702][ T7892] loop1: detected capacity change from 0 to 512 [ 120.434778][ T7892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.483349][ T7892] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.582712][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.686727][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 121.695957][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 121.824155][ T7913] netlink: 'syz.8.1501': attribute type 10 has an invalid length. [ 121.913209][ T7913] team0: Port device netdevsim0 added [ 122.010863][ T7926] hub 1-0:1.0: USB hub found [ 122.018783][ T7926] hub 1-0:1.0: 8 ports detected [ 122.093179][ T7932] loop7: detected capacity change from 0 to 512 [ 122.125321][ T7932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.148182][ T7932] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.194278][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.210162][ T7945] random: crng reseeded on system resumption [ 122.263811][ T7945] loop8: detected capacity change from 0 to 512 [ 122.272766][ T7945] ext4: Bad value for 'debug_want_extra_isize' [ 122.396163][ T7949] hub 1-0:1.0: USB hub found [ 122.401462][ T7949] hub 1-0:1.0: 8 ports detected [ 122.506253][ T7953] netlink: 'syz.8.1514': attribute type 12 has an invalid length. [ 123.070161][ T7964] loop1: detected capacity change from 0 to 512 [ 123.133060][ T7964] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1518: bad orphan inode 15 [ 123.161559][ T7964] ext4_test_bit(bit=14, block=5) = 0 [ 123.185708][ T7929] syz.2.1507 (7929) used greatest stack depth: 6888 bytes left [ 123.192375][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.402829][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.420798][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 123.420815][ T29] audit: type=1326 audit(1766126667.778:25877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d547a65e7 code=0x7ffc0000 [ 123.539373][ T7982] loop1: detected capacity change from 0 to 128 [ 123.576414][ T7982] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.640988][ T7982] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.654824][ T7989] loop7: detected capacity change from 0 to 512 [ 123.661143][ T29] audit: type=1326 audit(1766126667.808:25878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 123.684761][ T29] audit: type=1326 audit(1766126667.808:25879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d5474b829 code=0x7ffc0000 [ 123.708423][ T29] audit: type=1326 audit(1766126667.808:25880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d547a65e7 code=0x7ffc0000 [ 123.732462][ T29] audit: type=1326 audit(1766126667.808:25881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d5474b829 code=0x7ffc0000 [ 123.756065][ T29] audit: type=1326 audit(1766126667.808:25882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 123.779813][ T29] audit: type=1326 audit(1766126667.808:25883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 123.803470][ T29] audit: type=1326 audit(1766126667.808:25884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 123.827176][ T29] audit: type=1326 audit(1766126667.818:25885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 123.850920][ T29] audit: type=1326 audit(1766126667.818:25886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7973 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d547a65e7 code=0x7ffc0000 [ 123.856080][ T7992] pim6reg: entered allmulticast mode [ 123.889444][ T7991] pim6reg: left allmulticast mode [ 123.985236][ T7989] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 124.040846][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.055501][ T7989] EXT4-fs (loop7): 1 truncate cleaned up [ 124.073491][ T7989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.126139][ T8006] loop8: detected capacity change from 0 to 764 [ 124.264168][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1535'. [ 124.617715][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.800705][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1541'. [ 124.860921][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 124.881888][ T3617] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.914944][ T3617] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.968066][ T3617] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.982940][ T3617] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.188068][ T8056] loop7: detected capacity change from 0 to 764 [ 125.470008][ T8065] loop7: detected capacity change from 0 to 128 [ 125.584187][ T8065] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.600243][ T8065] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.627496][ T7206] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.906376][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1558'. [ 127.451510][ T8126] raw_sendmsg: syz.1.1574 forgot to set AF_INET. Fix it! [ 127.536042][ T8126] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.680130][ T8125] Process accounting resumed [ 128.656241][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 128.656261][ T29] audit: type=1326 audit(1766126672.998:26144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f577f5f65e7 code=0x7ffc0000 [ 128.787960][ T29] audit: type=1326 audit(1766126673.008:26145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f577f59b829 code=0x7ffc0000 [ 128.811721][ T29] audit: type=1326 audit(1766126673.008:26146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f577f5f65e7 code=0x7ffc0000 [ 128.835438][ T29] audit: type=1326 audit(1766126673.008:26147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f577f59b829 code=0x7ffc0000 [ 128.859363][ T29] audit: type=1326 audit(1766126673.008:26148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 128.883171][ T29] audit: type=1326 audit(1766126673.008:26149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 128.907085][ T29] audit: type=1326 audit(1766126673.008:26150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 128.930830][ T29] audit: type=1326 audit(1766126673.028:26151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 128.954775][ T29] audit: type=1326 audit(1766126673.028:26152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f577f5f65e7 code=0x7ffc0000 [ 128.978408][ T29] audit: type=1326 audit(1766126673.028:26153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f577f59b829 code=0x7ffc0000 [ 130.122936][ T8210] loop7: detected capacity change from 0 to 512 [ 130.191139][ T8210] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1599: bad orphan inode 15 [ 130.271074][ T8210] ext4_test_bit(bit=14, block=5) = 0 [ 130.292875][ T8210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.508962][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.696427][ T8240] sch_fq: defrate 4294967295 ignored. [ 131.847335][ T8245] loop7: detected capacity change from 0 to 1024 [ 131.931935][ T8245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.980905][ T8245] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.125911][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 132.198446][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 132.401392][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.848151][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'. [ 133.342580][ T3638] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.401249][ T3638] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.451540][ T3638] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.532378][ T3638] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.566238][ T8296] capability: warning: `syz.8.1627' uses deprecated v2 capabilities in a way that may be insecure [ 133.679488][ T29] kauditd_printk_skb: 1608 callbacks suppressed [ 133.679509][ T29] audit: type=1326 audit(1766126678.028:27762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 133.801067][ T29] audit: type=1326 audit(1766126678.068:27763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 133.824761][ T29] audit: type=1326 audit(1766126678.068:27764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 133.848848][ T29] audit: type=1326 audit(1766126678.078:27765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 133.872457][ T29] audit: type=1326 audit(1766126678.078:27766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 133.896309][ T29] audit: type=1326 audit(1766126678.088:27767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 133.919837][ T29] audit: type=1326 audit(1766126678.088:27768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 133.943521][ T29] audit: type=1326 audit(1766126678.088:27769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 133.967237][ T29] audit: type=1326 audit(1766126678.088:27770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f85be87b829 code=0x7ffc0000 [ 133.990921][ T29] audit: type=1326 audit(1766126678.088:27771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.0.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f85be8d65e7 code=0x7ffc0000 [ 134.295195][ T8309] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.305977][ T8309] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.427200][ T8304] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.521617][ T8309] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.532007][ T8309] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.615175][ T8312] loop1: detected capacity change from 0 to 8192 [ 134.629145][ T8309] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.639928][ T8309] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.712177][ T8309] team0: Port device netdevsim0 removed [ 134.724722][ T8309] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.735167][ T8309] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.945312][ T3674] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.953681][ T3674] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.053188][ T3681] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.061614][ T3681] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.107762][ T3681] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.116275][ T3681] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.148995][ T3681] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.157316][ T3681] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.233322][ T8342] hub 1-0:1.0: USB hub found [ 135.234534][ T8345] loop8: detected capacity change from 0 to 128 [ 135.238180][ T8342] hub 1-0:1.0: 8 ports detected [ 135.298982][ T8345] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.405996][ T8345] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.589081][ T7254] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.803820][ T8369] all: renamed from team_slave_0 [ 135.812133][ T8377] loop8: detected capacity change from 0 to 512 [ 135.824193][ T8378] loop7: detected capacity change from 0 to 512 [ 135.834793][ T8377] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1656: bad orphan inode 15 [ 135.852265][ T8378] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1657: bad orphan inode 15 [ 135.872228][ T8377] ext4_test_bit(bit=14, block=5) = 0 [ 135.889057][ T8378] ext4_test_bit(bit=14, block=5) = 0 [ 135.897054][ T8377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.919526][ T8378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.040174][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.086027][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.408199][ T8409] pimreg: entered allmulticast mode [ 138.434496][ T8409] pimreg: left allmulticast mode [ 138.646537][ T8418] loop1: detected capacity change from 0 to 512 [ 138.686207][ T8418] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1672: bad orphan inode 15 [ 138.708679][ T8417] hub 1-0:1.0: USB hub found [ 138.723496][ T8417] hub 1-0:1.0: 8 ports detected [ 138.738789][ T8418] ext4_test_bit(bit=14, block=5) = 0 [ 138.767538][ T8418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.988625][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.062321][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 139.062339][ T29] audit: type=1400 audit(1766126683.418:28168): avc: denied { write } for pid=8423 comm="syz.8.1675" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.092120][ T29] audit: type=1400 audit(1766126683.418:28169): avc: denied { open } for pid=8423 comm="syz.8.1675" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.122374][ T29] audit: type=1400 audit(1766126683.478:28170): avc: denied { ioctl } for pid=8423 comm="syz.8.1675" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.148408][ T29] audit: type=1400 audit(1766126683.478:28171): avc: denied { bind } for pid=8423 comm="syz.8.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.169185][ T29] audit: type=1400 audit(1766126683.478:28172): avc: denied { setopt } for pid=8423 comm="syz.8.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.190048][ T29] audit: type=1400 audit(1766126683.508:28173): avc: denied { name_bind } for pid=8423 comm="syz.8.1675" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.211927][ T29] audit: type=1400 audit(1766126683.508:28174): avc: denied { node_bind } for pid=8423 comm="syz.8.1675" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 139.234902][ T29] audit: type=1326 audit(1766126683.518:28175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 139.258783][ T29] audit: type=1326 audit(1766126683.518:28176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 139.282785][ T29] audit: type=1326 audit(1766126683.568:28177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8425 comm="syz.2.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 139.305652][ T8428] loop1: detected capacity change from 0 to 512 [ 139.312531][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1678'. [ 139.321773][ T8436] netlink: 'syz.7.1678': attribute type 30 has an invalid length. [ 139.346857][ T3671] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.361590][ T8436] netlink: 664 bytes leftover after parsing attributes in process `syz.7.1678'. [ 139.363515][ T3671] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.491654][ T3671] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.500751][ T3671] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.555324][ T8431] tipc: Started in network mode [ 139.560325][ T8431] tipc: Node identity 7eef73e3d611, cluster identity 4711 [ 139.567743][ T8431] tipc: Enabled bearer , priority 0 [ 139.577448][ T8428] EXT4-fs (loop1): too many log groups per flexible block group [ 139.587816][ T8428] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 139.595892][ T8428] EXT4-fs (loop1): mount failed [ 139.599840][ T8430] tipc: Resetting bearer [ 139.627068][ T8430] tipc: Disabling bearer [ 139.749996][ T8459] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 139.775951][ T8459] loop7: detected capacity change from 0 to 512 [ 139.846630][ T8459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.860390][ T8459] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.983824][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.013817][ T8479] loop1: detected capacity change from 0 to 764 [ 140.225426][ T8494] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1698'. [ 140.254217][ T8489] tipc: Started in network mode [ 140.259171][ T8489] tipc: Node identity 96a6b384572, cluster identity 4711 [ 140.266390][ T8489] tipc: Enabled bearer , priority 0 [ 140.300421][ T8483] tipc: Resetting bearer [ 140.374692][ T8498] loop7: detected capacity change from 0 to 512 [ 140.394897][ T8498] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1699: bad orphan inode 15 [ 140.407140][ T8498] ext4_test_bit(bit=14, block=5) = 0 [ 140.414638][ T8498] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.444506][ T8483] tipc: Disabling bearer [ 140.542593][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.800762][ T8519] loop7: detected capacity change from 0 to 764 [ 141.139688][ T8543] tipc: Enabling of bearer rejected, failed to enable media [ 141.228395][ T8548] loop8: detected capacity change from 0 to 512 [ 141.243162][ T8548] EXT4-fs (loop8): too many log groups per flexible block group [ 141.290924][ T8548] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 141.298640][ T8548] EXT4-fs (loop8): mount failed [ 141.755231][ T8566] loop8: detected capacity change from 0 to 764 [ 141.781341][ T8566] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 141.871600][ T8574] tipc: Enabled bearer , priority 0 [ 141.932841][ T8573] tipc: Resetting bearer [ 141.976114][ T8573] tipc: Disabling bearer [ 141.992523][ T8582] all: renamed from team_slave_0 (while UP) [ 142.747194][ T8599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1736'. [ 142.776342][ T8599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1736'. [ 143.062172][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 143.109085][ T8605] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 143.560793][ T8613] program syz.1.1741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.255526][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 144.255600][ T29] audit: type=1326 audit(1766126688.608:28552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.557503][ T29] audit: type=1326 audit(1766126688.648:28553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.581308][ T29] audit: type=1326 audit(1766126688.648:28554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.605524][ T29] audit: type=1326 audit(1766126688.648:28555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.629225][ T29] audit: type=1326 audit(1766126688.648:28556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.652859][ T29] audit: type=1326 audit(1766126688.648:28557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.676474][ T29] audit: type=1326 audit(1766126688.648:28558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.700060][ T29] audit: type=1326 audit(1766126688.648:28559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.723716][ T29] audit: type=1326 audit(1766126688.648:28560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.747472][ T29] audit: type=1326 audit(1766126688.648:28561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.1.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb6079f749 code=0x7ffc0000 [ 144.886973][ T8641] loop1: detected capacity change from 0 to 512 [ 145.038450][ T8645] hub 1-0:1.0: USB hub found [ 145.051270][ T8645] hub 1-0:1.0: 8 ports detected [ 145.066242][ T8641] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1747: bad orphan inode 15 [ 145.078799][ T8641] ext4_test_bit(bit=14, block=5) = 0 [ 145.085414][ T8641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.178995][ T8656] loop8: detected capacity change from 0 to 764 [ 145.211337][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1750'. [ 145.238069][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.340944][ T8663] loop8: detected capacity change from 0 to 512 [ 145.362666][ T8663] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.387947][ T8663] EXT4-fs (loop8): mount failed [ 145.863276][ T8691] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1765'. [ 145.929166][ T8697] tmpfs: Bad value for 'mpol' [ 145.944667][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1767'. [ 146.163406][ T8708] hub 1-0:1.0: USB hub found [ 146.178898][ T8708] hub 1-0:1.0: 8 ports detected [ 146.234658][ T8714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1773'. [ 146.392212][ T8729] loop8: detected capacity change from 0 to 512 [ 146.404168][ T8729] EXT4-fs (loop8): too many log groups per flexible block group [ 146.415742][ T8729] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 146.424603][ T8729] EXT4-fs (loop8): mount failed [ 146.463447][ T8736] loop1: detected capacity change from 0 to 736 [ 146.614090][ T8746] loop1: detected capacity change from 0 to 764 [ 146.697086][ T8751] hub 1-0:1.0: USB hub found [ 146.714915][ T8751] hub 1-0:1.0: 8 ports detected [ 146.977591][ T8766] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 147.209671][ T8772] loop1: detected capacity change from 0 to 8192 [ 147.335615][ T8787] tipc: Enabling of bearer rejected, failed to enable media [ 147.362963][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8790 comm=syz.8.1800 [ 147.807191][ T8681] loop7: detected capacity change from 0 to 256 [ 148.028167][ T8681] FAT-fs (loop7): Directory bread(block 64) failed [ 148.034887][ T8681] FAT-fs (loop7): Directory bread(block 65) failed [ 148.041598][ T8681] FAT-fs (loop7): Directory bread(block 66) failed [ 148.048166][ T8681] FAT-fs (loop7): Directory bread(block 67) failed [ 148.054877][ T8681] FAT-fs (loop7): Directory bread(block 68) failed [ 148.061513][ T8681] FAT-fs (loop7): Directory bread(block 69) failed [ 148.068489][ T8681] FAT-fs (loop7): Directory bread(block 70) failed [ 148.075873][ T8681] FAT-fs (loop7): Directory bread(block 71) failed [ 148.082970][ T8681] FAT-fs (loop7): Directory bread(block 72) failed [ 148.089607][ T8681] FAT-fs (loop7): Directory bread(block 73) failed [ 149.338822][ T29] kauditd_printk_skb: 3323 callbacks suppressed [ 149.338842][ T29] audit: type=1326 audit(1766126693.688:31884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8855 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 149.425360][ T29] audit: type=1326 audit(1766126693.748:31885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85be8de1ff code=0x7ffc0000 [ 149.499539][ T29] audit: type=1400 audit(1766126693.808:31886): avc: denied { mounton } for pid=8853 comm="syz.0.1826" path="/proc/893/task" dev="proc" ino=24783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 149.499656][ T29] audit: type=1400 audit(1766126693.808:31887): avc: denied { mount } for pid=8853 comm="syz.0.1826" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.645491][ T29] audit: type=1400 audit(1766126693.998:31888): avc: denied { associate } for pid=8853 comm="syz.0.1826" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.712534][ T29] audit: type=1326 audit(1766126694.068:31889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f85be8df7d7 code=0x7ffc0000 [ 149.714462][ T29] audit: type=1326 audit(1766126694.068:31890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85be8ddf90 code=0x7ffc0000 [ 149.714919][ T29] audit: type=1326 audit(1766126694.068:31891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8853 comm="syz.0.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85be8de3aa code=0x7ffc0000 [ 149.790836][ T29] audit: type=1326 audit(1766126694.138:31892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8866 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 149.791230][ T29] audit: type=1326 audit(1766126694.148:31893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8866 comm="syz.2.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 150.404960][ T8877] loop7: detected capacity change from 0 to 764 [ 151.607435][ T8940] loop1: detected capacity change from 0 to 512 [ 151.662577][ T8940] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1857: bad orphan inode 15 [ 151.686593][ T8948] hub 1-0:1.0: USB hub found [ 151.692120][ T8948] hub 1-0:1.0: 8 ports detected [ 151.727603][ T8940] ext4_test_bit(bit=14, block=5) = 0 [ 151.733802][ T8940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.798995][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.860857][ T8960] loop1: detected capacity change from 0 to 512 [ 151.886223][ T8960] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1865: bad orphan inode 15 [ 151.898261][ T8960] ext4_test_bit(bit=14, block=5) = 0 [ 151.904639][ T8960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.960485][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.343367][ T8978] loop8: detected capacity change from 0 to 512 [ 152.372649][ T8978] EXT4-fs (loop8): too many log groups per flexible block group [ 152.381568][ T8978] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 152.388391][ T8978] EXT4-fs (loop8): mount failed [ 152.515790][ T8989] hub 1-0:1.0: USB hub found [ 152.520651][ T8989] hub 1-0:1.0: 8 ports detected [ 152.698674][ T9003] loop8: detected capacity change from 0 to 512 [ 152.707435][ T9003] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1881: bad orphan inode 15 [ 152.718085][ T9003] ext4_test_bit(bit=14, block=5) = 0 [ 152.728483][ T9003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.827045][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.923860][ T9008] loop7: detected capacity change from 0 to 512 [ 152.958647][ T9008] EXT4-fs (loop7): too many log groups per flexible block group [ 152.981718][ T9008] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 153.009682][ T9008] EXT4-fs (loop7): mount failed [ 153.069533][ T9020] hub 1-0:1.0: USB hub found [ 153.074653][ T9020] hub 1-0:1.0: 8 ports detected [ 153.296655][ T9032] loop8: detected capacity change from 0 to 512 [ 153.309933][ T9032] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1894: bad orphan inode 15 [ 153.320717][ T9032] ext4_test_bit(bit=14, block=5) = 0 [ 153.328216][ T9032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.413918][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.432410][ T9038] loop7: detected capacity change from 0 to 512 [ 153.452678][ T9038] EXT4-fs: inline encryption not supported [ 153.475864][ T9038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.769573][ T9067] loop8: detected capacity change from 0 to 512 [ 153.792754][ T9067] EXT4-fs (loop8): too many log groups per flexible block group [ 153.795169][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.801181][ T9067] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 153.876128][ T9067] EXT4-fs (loop8): mount failed [ 154.187207][ T9083] loop7: detected capacity change from 0 to 512 [ 154.196002][ T9083] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1908: bad orphan inode 15 [ 154.206630][ T9083] ext4_test_bit(bit=14, block=5) = 0 [ 154.212701][ T9083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.288749][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.607230][ T9105] EXT4-fs: inline encryption not supported [ 154.797692][ T9105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.628394][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.808783][ T29] kauditd_printk_skb: 1979 callbacks suppressed [ 155.808804][ T29] audit: type=1326 audit(1766126700.158:33873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.813057][ T29] audit: type=1326 audit(1766126700.158:33874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.837110][ T29] audit: type=1326 audit(1766126700.158:33875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.861314][ T29] audit: type=1326 audit(1766126700.158:33876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.885618][ T29] audit: type=1326 audit(1766126700.158:33877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.909936][ T29] audit: type=1326 audit(1766126700.158:33878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.933810][ T29] audit: type=1326 audit(1766126700.158:33879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.957440][ T29] audit: type=1326 audit(1766126700.158:33880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 156.981074][ T29] audit: type=1326 audit(1766126700.168:33881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 157.004822][ T29] audit: type=1326 audit(1766126700.168:33882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.7.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577f5ff749 code=0x7ffc0000 [ 157.172609][ T9144] set_capacity_and_notify: 2 callbacks suppressed [ 157.172628][ T9144] loop1: detected capacity change from 0 to 512 [ 157.188597][ T9144] EXT4-fs: inline encryption not supported [ 157.206744][ T9144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.322405][ T9168] tipc: Enabled bearer , priority 0 [ 157.351341][ T9167] tipc: Resetting bearer [ 157.513718][ T9167] tipc: Disabling bearer [ 157.914555][ T9175] all: renamed from team_slave_0 [ 158.492783][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.586932][ T9193] loop8: detected capacity change from 0 to 512 [ 158.626123][ T9222] loop1: detected capacity change from 0 to 128 [ 158.635430][ T9193] EXT4-fs: inline encryption not supported [ 158.645573][ T9222] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 158.679634][ T9193] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.721120][ T9222] loop1: detected capacity change from 128 to 2 [ 158.771319][ T3313] FAT-fs (loop1): Directory bread(block 33) failed [ 158.799311][ T3313] FAT-fs (loop1): Directory bread(block 34) failed [ 158.820084][ T3313] FAT-fs (loop1): Directory bread(block 35) failed [ 158.836045][ T3313] FAT-fs (loop1): Directory bread(block 36) failed [ 158.847153][ T3313] FAT-fs (loop1): Directory bread(block 37) failed [ 158.855072][ T3313] FAT-fs (loop1): Directory bread(block 38) failed [ 158.861955][ T3313] FAT-fs (loop1): Directory bread(block 39) failed [ 158.868536][ T3313] FAT-fs (loop1): Directory bread(block 40) failed [ 158.931993][ T9233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1964'. [ 158.985496][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.110380][ T3638] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.179461][ T3638] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.269606][ T3638] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.346676][ T3638] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.430380][ T3638] bridge_slave_1: left allmulticast mode [ 159.436399][ T3638] bridge_slave_1: left promiscuous mode [ 159.442118][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.450615][ T3638] bridge_slave_0: left allmulticast mode [ 159.456483][ T3638] bridge_slave_0: left promiscuous mode [ 159.462362][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.498228][ T9264] loop7: detected capacity change from 0 to 764 [ 159.518612][ T9266] loop8: detected capacity change from 0 to 512 [ 159.544090][ T9266] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1974: bad orphan inode 15 [ 159.557567][ T9266] ext4_test_bit(bit=14, block=5) = 0 [ 159.563720][ T9266] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.651062][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 159.705076][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.716134][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.726391][ T3638] bond0 (unregistering): Released all slaves [ 159.736303][ T9269] tipc: Enabling of bearer rejected, failed to enable media [ 159.745458][ T9278] s: renamed from team_slave_0 [ 159.774627][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.795806][ T9275] hsr_slave_1 (unregistering): left promiscuous mode [ 159.817719][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 159.835252][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 159.861977][ T3638] tipc: Left network mode [ 159.879757][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 159.892176][ T3638] hsr_slave_0: left promiscuous mode [ 159.898153][ T3638] hsr_slave_1: left promiscuous mode [ 159.905381][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.912862][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.927987][ T9287] loop8: detected capacity change from 0 to 2048 [ 159.936363][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.943821][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.954488][ T3638] veth1_macvtap: left promiscuous mode [ 159.960018][ T3638] veth0_macvtap: left promiscuous mode [ 159.965745][ T3638] veth1_vlan: left promiscuous mode [ 159.971201][ T3638] veth0_vlan: left promiscuous mode [ 159.990584][ T9287] loop8: p2 p3 p7 [ 160.180018][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 160.224689][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 160.251157][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.258367][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.265683][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 160.276502][ T9242] bridge_slave_0: entered allmulticast mode [ 160.284123][ T9242] bridge_slave_0: entered promiscuous mode [ 160.291791][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 160.301178][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 160.311895][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.319001][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.326733][ T9242] bridge_slave_1: entered allmulticast mode [ 160.333523][ T9242] bridge_slave_1: entered promiscuous mode [ 160.341036][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1978'. [ 160.379090][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.411250][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.482373][ T9242] team0: Port device team_slave_0 added [ 160.495565][ T9242] team0: Port device team_slave_1 added [ 160.537035][ T9321] loop7: detected capacity change from 0 to 512 [ 160.556228][ T9314] tipc: Started in network mode [ 160.561278][ T9314] tipc: Node identity e60f2258d0ec, cluster identity 4711 [ 160.568463][ T9314] tipc: Enabled bearer , priority 0 [ 160.576367][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.576962][ T9321] EXT4-fs (loop7): too many log groups per flexible block group [ 160.583565][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.597746][ T9321] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 160.617541][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.624584][ T9321] EXT4-fs (loop7): mount failed [ 160.651905][ T9312] tipc: Resetting bearer [ 160.702267][ T9312] tipc: Disabling bearer [ 160.710696][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.717715][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.744100][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.997419][ T9337] loop8: detected capacity change from 0 to 764 [ 161.007813][ T9242] hsr_slave_0: entered promiscuous mode [ 161.017076][ T9338] loop7: detected capacity change from 0 to 512 [ 161.031498][ T9242] hsr_slave_1: entered promiscuous mode [ 161.066279][ T9338] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1998: bad orphan inode 15 [ 161.081410][ T9338] ext4_test_bit(bit=14, block=5) = 0 [ 161.132833][ T9338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.262189][ T7206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.290184][ T9242] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 161.308166][ T9242] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 161.325392][ T9358] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 161.337098][ T9242] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 161.350676][ T9242] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 161.395905][ T7206] FAT-fs (loop7): Directory bread(block 33) failed [ 161.415127][ T7206] FAT-fs (loop7): Directory bread(block 34) failed [ 161.425043][ T7206] FAT-fs (loop7): Directory bread(block 35) failed [ 161.432768][ T7206] FAT-fs (loop7): Directory bread(block 36) failed [ 161.440956][ T7206] FAT-fs (loop7): Directory bread(block 37) failed [ 161.448521][ T7206] FAT-fs (loop7): Directory bread(block 38) failed [ 161.452405][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.475942][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.482847][ T7206] FAT-fs (loop7): Directory bread(block 39) failed [ 161.490474][ T7206] FAT-fs (loop7): Directory bread(block 40) failed [ 161.503869][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.511084][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.528194][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.535692][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.659942][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.702897][ T63] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.714030][ T63] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.766793][ T9390] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2015: bad orphan inode 15 [ 161.781501][ T9390] ext4_test_bit(bit=14, block=5) = 0 [ 161.798615][ T9390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.800313][ T63] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.821228][ T63] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.855151][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.887743][ T63] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.898423][ T63] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.992351][ T63] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.003089][ T63] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.078011][ T9415] 9p: Bad value for 'rfdno' [ 162.088123][ T9242] veth0_vlan: entered promiscuous mode [ 162.102252][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 162.102269][ T29] audit: type=1326 audit(1766126706.438:33961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.116500][ T9242] veth1_vlan: entered promiscuous mode [ 162.132065][ T29] audit: type=1326 audit(1766126706.448:33962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.161354][ T29] audit: type=1326 audit(1766126706.448:33963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.185565][ T29] audit: type=1326 audit(1766126706.448:33964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.209611][ T29] audit: type=1326 audit(1766126706.448:33965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.233404][ T29] audit: type=1326 audit(1766126706.458:33966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.257019][ T29] audit: type=1326 audit(1766126706.458:33967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.290564][ T29] audit: type=1326 audit(1766126706.548:33968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.314672][ T29] audit: type=1326 audit(1766126706.548:33969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.338393][ T29] audit: type=1326 audit(1766126706.548:33970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6d547af749 code=0x7ffc0000 [ 162.365705][ T9242] veth0_macvtap: entered promiscuous mode [ 162.387150][ T9242] veth1_macvtap: entered promiscuous mode [ 162.403974][ T9395] chnl_net:caif_netlink_parms(): no params data found [ 162.487726][ T63] bridge_slave_1: left allmulticast mode [ 162.493466][ T63] bridge_slave_1: left promiscuous mode [ 162.499172][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.507613][ T63] bridge_slave_0: left allmulticast mode [ 162.513353][ T63] bridge_slave_0: left promiscuous mode [ 162.519338][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.624849][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.643015][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.653032][ T63] bond0 (unregistering): Released all slaves [ 162.685077][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.733863][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.744550][ T3637] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.779548][ T3637] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.808624][ T3637] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.821782][ T63] hsr_slave_0: left promiscuous mode [ 162.828486][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.836042][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.844338][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.852106][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.864159][ T63] veth1_macvtap: left promiscuous mode [ 162.870057][ T63] veth0_macvtap: left promiscuous mode [ 162.875838][ T63] veth1_vlan: left promiscuous mode [ 162.881304][ T63] veth0_vlan: left promiscuous mode [ 162.976143][ T63] team0 (unregistering): Port device team_slave_1 removed [ 162.988288][ T63] team0 (unregistering): Port device team_slave_0 removed [ 163.040664][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.047823][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.055230][ T9395] bridge_slave_0: entered allmulticast mode [ 163.061920][ T9395] bridge_slave_0: entered promiscuous mode [ 163.068673][ T3637] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.091829][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.099141][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.110063][ T9395] bridge_slave_1: entered allmulticast mode [ 163.117533][ T9395] bridge_slave_1: entered promiscuous mode [ 163.169789][ T9395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.187226][ T9395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.228243][ T9395] team0: Port device team_slave_0 added [ 163.235691][ T9395] team0: Port device team_slave_1 added [ 163.259042][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.266624][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.293027][ T9395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.323185][ T9395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.330192][ T9395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.356215][ T9395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.466214][ T9395] hsr_slave_0: entered promiscuous mode [ 163.475688][ T9395] hsr_slave_1: entered promiscuous mode [ 163.483253][ T9395] debugfs: 'hsr0' already exists in 'hsr' [ 163.489023][ T9395] Cannot create hsr debugfs directory [ 163.726128][ T9487] tipc: Enabled bearer , priority 0 [ 163.766448][ T9480] tipc: Disabling bearer [ 163.776198][ T9484] tipc: Started in network mode [ 163.781578][ T9484] tipc: Node identity 76b83c40c2f2, cluster identity 4711 [ 163.788978][ T9484] tipc: Enabled bearer , priority 0 [ 163.941428][ T9483] tipc: Resetting bearer [ 163.964499][ T9492] set_capacity_and_notify: 3 callbacks suppressed [ 163.964519][ T9492] loop8: detected capacity change from 0 to 764 [ 164.094229][ T9483] tipc: Disabling bearer [ 164.196901][ T9504] xt_connbytes: Forcing CT accounting to be enabled [ 164.203693][ T9504] set match dimension is over the limit! [ 164.421470][ T9498] IPVS: Unknown mcast interface: hsr0 [ 164.497116][ T9508] loop9: detected capacity change from 0 to 512 [ 164.542653][ T9508] EXT4-fs (loop9): too many log groups per flexible block group [ 164.559943][ T9508] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 164.574476][ T9508] EXT4-fs (loop9): mount failed [ 165.070689][ T9395] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.089539][ T9395] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.133545][ T9520] tipc: Enabled bearer , priority 0 [ 165.140743][ T9395] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.221914][ T9519] tipc: Disabling bearer [ 165.238687][ T9527] loop9: detected capacity change from 0 to 764 [ 165.281448][ T9395] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.555772][ T9395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.594653][ T9395] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.633334][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.640572][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.693899][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.701105][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.949169][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.977890][ T9554] __nla_validate_parse: 24 callbacks suppressed [ 165.977912][ T9554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2058'. [ 166.112904][ T9564] 9p: Bad value for 'rfdno' [ 166.134574][ T9395] veth0_vlan: entered promiscuous mode [ 166.153599][ T9395] veth1_vlan: entered promiscuous mode [ 166.180410][ T9572] tipc: Enabling of bearer rejected, failed to enable media [ 166.210750][ T9395] veth0_macvtap: entered promiscuous mode [ 166.222694][ T9395] veth1_macvtap: entered promiscuous mode [ 166.235811][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.253278][ T9395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.290279][ T3633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.310753][ T3633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.332227][ T3628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.345733][ T3628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.520745][ T3633] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.663697][ T9595] all: renamed from team_slave_0 (while UP) [ 166.934877][ T9602] loop8: detected capacity change from 0 to 512 [ 166.977698][ T9602] EXT4-fs (loop8): too many log groups per flexible block group [ 167.001491][ T9602] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 167.022947][ T9602] EXT4-fs (loop8): mount failed [ 167.200399][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2073'. [ 167.254094][ T9608] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 167.472689][ T9617] loop9: detected capacity change from 0 to 256 [ 167.509311][ T9617] vfat: Unknown parameter '' [ 167.784024][ T9627] 9p: Bad value for 'rfdno' [ 167.845268][ T9630] tipc: Enabled bearer , priority 0 [ 167.873477][ T9629] tipc: Disabling bearer [ 168.027729][ T9641] all: renamed from team_slave_0 (while UP) [ 168.149495][ T9646] random: crng reseeded on system resumption [ 168.155906][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 168.155925][ T29] audit: type=1400 audit(1766126712.498:33991): avc: denied { write } for pid=9644 comm="syz.0.2088" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.185717][ T29] audit: type=1400 audit(1766126712.498:33992): avc: denied { open } for pid=9644 comm="syz.0.2088" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.362598][ T9656] loop9: detected capacity change from 0 to 512 [ 168.394499][ T9656] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 168.404843][ T9656] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 168.414857][ T9656] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2093: Failed to acquire dquot type 1 [ 168.459364][ T9662] 9p: Bad value for 'rfdno' [ 168.493250][ T9656] EXT4-fs (loop9): 1 truncate cleaned up [ 168.512567][ T9656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.533270][ T29] audit: type=1326 audit(1766126712.888:33993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 168.564740][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.585242][ T9656] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.600177][ T29] audit: type=1326 audit(1766126712.908:33994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 168.623933][ T29] audit: type=1326 audit(1766126712.908:33995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 168.647942][ T29] audit: type=1326 audit(1766126712.908:33996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 168.671905][ T29] audit: type=1326 audit(1766126712.908:33997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 168.695616][ T29] audit: type=1326 audit(1766126712.918:33998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9664 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 168.736684][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2093'. [ 168.793512][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.949031][ T9682] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 168.988934][ T9685] pimreg: tun_chr_ioctl cmd 1074025677 [ 168.996795][ T9685] pimreg: linktype set to 270 [ 169.160077][ T9696] loop9: detected capacity change from 0 to 512 [ 169.199131][ T9696] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2105: bad orphan inode 15 [ 169.263286][ T9696] ext4_test_bit(bit=14, block=5) = 0 [ 169.269471][ T9696] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.353272][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.366400][ T9705] loop3: detected capacity change from 0 to 512 [ 169.464696][ T9705] EXT4-fs (loop3): too many log groups per flexible block group [ 169.478328][ T9705] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 169.495561][ T9705] EXT4-fs (loop3): mount failed [ 169.642586][ T9721] geneve2: entered promiscuous mode [ 169.648003][ T9721] geneve2: entered allmulticast mode [ 169.680946][ T9726] random: crng reseeded on system resumption [ 169.956749][ T9736] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.966279][ T9736] vhci_hcd vhci_hcd.2: invalid port number 96 [ 169.972682][ T9736] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 170.055020][ T9748] tipc: Enabling of bearer rejected, failed to enable media [ 170.064178][ T9749] bridge: RTM_NEWNEIGH with invalid ether address [ 170.099496][ T9750] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2125'. [ 170.144858][ T9757] all: renamed from team_slave_0 (while UP) [ 170.195338][ T9763] loop8: detected capacity change from 0 to 1024 [ 170.205116][ T9766] loop9: detected capacity change from 0 to 764 [ 170.212836][ T9763] ext4: Unknown parameter 'subj_role' [ 170.230677][ T9763] netlink: 'syz.8.2130': attribute type 4 has an invalid length. [ 170.281879][ T9763] netlink: 'syz.8.2130': attribute type 4 has an invalid length. [ 170.302892][ T9773] loop3: detected capacity change from 0 to 764 [ 170.332010][ T3623] Bluetooth: hci0: Frame reassembly failed (-84) [ 170.528003][ T9789] team0 (unregistering): Port device team_slave_0 removed [ 170.553201][ T9789] team0 (unregistering): Port device team_slave_1 removed [ 171.261803][ T9801] 9p: Bad value for 'rfdno' [ 171.342730][ T9807] loop3: detected capacity change from 0 to 256 [ 171.404106][ T9807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2146'. [ 171.414395][ T9807] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2146'. [ 171.433003][ T9809] loop9: detected capacity change from 0 to 2048 [ 171.468000][ T9809] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 171.563926][ T9818] FAULT_INJECTION: forcing a failure. [ 171.563926][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 171.576913][ T9818] CPU: 1 UID: 0 PID: 9818 Comm: syz.3.2150 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.576955][ T9818] Tainted: [W]=WARN [ 171.576970][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.576985][ T9818] Call Trace: [ 171.576993][ T9818] [ 171.577059][ T9818] __dump_stack+0x1d/0x30 [ 171.577091][ T9818] dump_stack_lvl+0xe8/0x140 [ 171.577118][ T9818] dump_stack+0x15/0x1b [ 171.577196][ T9818] should_fail_ex+0x265/0x280 [ 171.577246][ T9818] should_failslab+0x8c/0xb0 [ 171.577388][ T9818] __kvmalloc_node_noprof+0x149/0x6b0 [ 171.577417][ T9818] ? xt_alloc_table_info+0x40/0x80 [ 171.577457][ T9818] ? should_fail_ex+0xdb/0x280 [ 171.577527][ T9818] xt_alloc_table_info+0x40/0x80 [ 171.577615][ T9818] do_ipt_set_ctl+0x59c/0x820 [ 171.577644][ T9818] nf_setsockopt+0x199/0x1b0 [ 171.577739][ T9818] ip_setsockopt+0x102/0x110 [ 171.577768][ T9818] udp_setsockopt+0x99/0xb0 [ 171.577875][ T9818] sock_common_setsockopt+0x69/0x80 [ 171.577897][ T9818] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 171.577918][ T9818] __sys_setsockopt+0x184/0x200 [ 171.577950][ T9818] __x64_sys_setsockopt+0x64/0x80 [ 171.577986][ T9818] x64_sys_call+0x21d5/0x3000 [ 171.578010][ T9818] do_syscall_64+0xd8/0x2c0 [ 171.578086][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.578112][ T9818] RIP: 0033:0x7fe3a0d0f749 [ 171.578132][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.578200][ T9818] RSP: 002b:00007fe39f76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.578225][ T9818] RAX: ffffffffffffffda RBX: 00007fe3a0f65fa0 RCX: 00007fe3a0d0f749 [ 171.578241][ T9818] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 171.578317][ T9818] RBP: 00007fe39f76f090 R08: 0000000000000250 R09: 0000000000000000 [ 171.578329][ T9818] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 171.578372][ T9818] R13: 00007fe3a0f66038 R14: 00007fe3a0f65fa0 R15: 00007fffb28ba978 [ 171.578392][ T9818] [ 171.597253][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2147'. [ 171.609572][ T9809] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.812067][ T9809] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1582 with error 28 [ 171.824839][ T9809] EXT4-fs (loop9): This should not happen!! Data will be lost [ 171.824839][ T9809] [ 171.834715][ T9809] EXT4-fs (loop9): Total free blocks count 0 [ 171.840954][ T9809] EXT4-fs (loop9): Free/Dirty block details [ 171.846921][ T9809] EXT4-fs (loop9): free_blocks=2415919104 [ 171.852890][ T9809] EXT4-fs (loop9): dirty_blocks=1584 [ 171.858205][ T9809] EXT4-fs (loop9): Block reservation details [ 171.864369][ T9809] EXT4-fs (loop9): i_reserved_data_blocks=99 [ 171.880020][ T9824] all: renamed from team_slave_0 (while UP) [ 171.947233][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 171.995248][ T9836] loop9: detected capacity change from 0 to 512 [ 172.010280][ T9836] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2154: bad orphan inode 15 [ 172.030700][ T9836] ext4_test_bit(bit=14, block=5) = 0 [ 172.047909][ T9836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.074709][ T9841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=9841 comm=gtp [ 172.089930][ T9841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=9841 comm=gtp [ 172.116998][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.270088][ T9855] loop8: detected capacity change from 0 to 764 [ 172.353026][ T9860] FAULT_INJECTION: forcing a failure. [ 172.353026][ T9860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.366574][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.9.2166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.366666][ T9860] Tainted: [W]=WARN [ 172.366673][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.366684][ T9860] Call Trace: [ 172.366691][ T9860] [ 172.366778][ T9860] __dump_stack+0x1d/0x30 [ 172.366806][ T9860] dump_stack_lvl+0xe8/0x140 [ 172.366828][ T9860] dump_stack+0x15/0x1b [ 172.366847][ T9860] should_fail_ex+0x265/0x280 [ 172.366894][ T9860] should_fail+0xb/0x20 [ 172.366929][ T9860] should_fail_usercopy+0x1a/0x20 [ 172.367038][ T9860] _copy_to_user+0x20/0xa0 [ 172.367071][ T9860] io_query+0x21a/0x530 [ 172.367107][ T9860] __se_sys_io_uring_register+0xc7/0xf20 [ 172.367171][ T9860] ? mutex_unlock+0x4f/0x90 [ 172.367200][ T9860] ? fput+0x8f/0xc0 [ 172.367231][ T9860] ? ksys_write+0x192/0x1a0 [ 172.367255][ T9860] __x64_sys_io_uring_register+0x55/0x70 [ 172.367327][ T9860] x64_sys_call+0x27ad/0x3000 [ 172.367352][ T9860] do_syscall_64+0xd8/0x2c0 [ 172.367390][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.367417][ T9860] RIP: 0033:0x7f2d5f74f749 [ 172.367434][ T9860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.367492][ T9860] RSP: 002b:00007f2d5e1b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 172.367516][ T9860] RAX: ffffffffffffffda RBX: 00007f2d5f9a5fa0 RCX: 00007f2d5f74f749 [ 172.367588][ T9860] RDX: 0000200000000000 RSI: 0000000000000023 RDI: ffffffffffffffff [ 172.367603][ T9860] RBP: 00007f2d5e1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.367615][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.367674][ T9860] R13: 00007f2d5f9a6038 R14: 00007f2d5f9a5fa0 R15: 00007ffd7c281d18 [ 172.367696][ T9860] [ 172.430603][ T9863] netlink: 'syz.2.2167': attribute type 3 has an invalid length. [ 172.436223][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 172.453076][ T9862] netlink: 'syz.2.2167': attribute type 3 has an invalid length. [ 172.454098][ T9589] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.491084][ T9776] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 172.516576][ T9867] netlink: 'syz.8.2168': attribute type 11 has an invalid length. [ 172.780348][ T9891] tipc: Cannot configure node identity twice [ 173.247985][ T9909] loop8: detected capacity change from 0 to 512 [ 173.257423][ T9909] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.266622][ T9909] EXT4-fs (loop8): filesystem is read-only [ 173.274787][ T9909] EXT4-fs (loop8): failed to initialize system zone (-117) [ 173.291166][ T9909] EXT4-fs (loop8): mount failed [ 173.399497][ T9913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.427246][ T9913] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.462729][ T9920] tipc: Enabling of bearer rejected, media not registered [ 173.470657][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 173.470674][ T29] audit: type=1326 audit(1766126717.798:34408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.500794][ T29] audit: type=1326 audit(1766126717.798:34409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.524356][ T29] audit: type=1326 audit(1766126717.798:34410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.548359][ T29] audit: type=1326 audit(1766126717.798:34407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.572372][ T29] audit: type=1326 audit(1766126717.798:34411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.596136][ T29] audit: type=1326 audit(1766126717.798:34412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.619824][ T29] audit: type=1326 audit(1766126717.798:34413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.643682][ T29] audit: type=1326 audit(1766126717.798:34414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.667366][ T29] audit: type=1326 audit(1766126717.798:34415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.690888][ T29] audit: type=1326 audit(1766126717.798:34416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9919 comm="syz.9.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d5f74f749 code=0x7ffc0000 [ 173.742461][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.033121][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.042129][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.050926][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.059689][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.068330][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.077003][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.085804][ T9951] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 174.329952][ T9975] hsr_slave_0: left promiscuous mode [ 174.339566][ T9975] hsr_slave_1: left promiscuous mode [ 174.382167][ T9978] random: crng reseeded on system resumption [ 174.455037][ T9984] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.303861][T10010] random: crng reseeded on system resumption [ 175.639459][T10036] all: renamed from team_slave_0 [ 175.839359][T10050] FAULT_INJECTION: forcing a failure. [ 175.839359][T10050] name failslab, interval 1, probability 0, space 0, times 0 [ 175.852276][T10050] CPU: 0 UID: 0 PID: 10050 Comm: syz.0.2234 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.852314][T10050] Tainted: [W]=WARN [ 175.852321][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.852333][T10050] Call Trace: [ 175.852339][T10050] [ 175.852346][T10050] __dump_stack+0x1d/0x30 [ 175.852392][T10050] dump_stack_lvl+0xe8/0x140 [ 175.852421][T10050] dump_stack+0x15/0x1b [ 175.852552][T10050] should_fail_ex+0x265/0x280 [ 175.852620][T10050] should_failslab+0x8c/0xb0 [ 175.852644][T10050] kmem_cache_alloc_noprof+0x69/0x4b0 [ 175.852666][T10050] ? alloc_empty_file+0x76/0x200 [ 175.852772][T10050] alloc_empty_file+0x76/0x200 [ 175.852799][T10050] path_openat+0x63/0x23b0 [ 175.852828][T10050] ? search_extable+0x53/0x80 [ 175.852858][T10050] ? strncpy_from_kernel_nofault+0x78/0x130 [ 175.852884][T10050] ? strncpy_from_kernel_nofault+0x78/0x130 [ 175.852915][T10050] ? fixup_exception+0x742/0xcf0 [ 175.853010][T10050] ? path_openat+0x1e82/0x23b0 [ 175.853057][T10050] ? spurious_kernel_fault+0xf7/0x490 [ 175.853234][T10050] do_filp_open+0x109/0x230 [ 175.853279][T10050] do_open_execat+0xd8/0x260 [ 175.853313][T10050] alloc_bprm+0x25/0x350 [ 175.853409][T10050] do_execveat_common+0x12e/0x750 [ 175.853437][T10050] __x64_sys_execve+0x5c/0x70 [ 175.853497][T10050] x64_sys_call+0x271d/0x3000 [ 175.853519][T10050] do_syscall_64+0xd8/0x2c0 [ 175.853584][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.853610][T10050] RIP: 0033:0x7f85be8df749 [ 175.853626][T10050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.853644][T10050] RSP: 002b:00007f85bd347038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 175.853733][T10050] RAX: ffffffffffffffda RBX: 00007f85beb35fa0 RCX: 00007f85be8df749 [ 175.853746][T10050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 175.853758][T10050] RBP: 00007f85bd347090 R08: 0000000000000000 R09: 0000000000000000 [ 175.853772][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.853787][T10050] R13: 00007f85beb36038 R14: 00007f85beb35fa0 R15: 00007ffd09b12bd8 [ 175.853813][T10050] [ 176.221846][T10064] tipc: Enabling of bearer rejected, media not registered [ 176.328629][ T3639] Bluetooth: hci0: Frame reassembly failed (-84) [ 177.044973][T10110] SELinux: policydb magic number 0x227ff8c does not match expected magic number 0xf97cff8c [ 177.078852][T10110] SELinux: failed to load policy [ 177.211279][T10115] __nla_validate_parse: 46 callbacks suppressed [ 177.211361][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 177.437215][T10135] set_capacity_and_notify: 2 callbacks suppressed [ 177.437271][T10135] loop3: detected capacity change from 0 to 1024 [ 177.453067][T10135] EXT4-fs: inline encryption not supported [ 177.455178][T10138] pimreg3: entered allmulticast mode [ 177.468855][T10138] netlink: 'syz.0.2266': attribute type 29 has an invalid length. [ 177.482078][T10135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.538503][T10143] 9pnet_fd: Insufficient options for proto=fd [ 177.810835][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.826870][T10149] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 177.880264][T10159] loop9: detected capacity change from 0 to 512 [ 177.890475][T10159] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2272: bad orphan inode 15 [ 177.900779][T10159] ext4_test_bit(bit=14, block=5) = 0 [ 177.908062][T10159] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.946028][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.004602][T10169] loop9: detected capacity change from 0 to 764 [ 178.054954][T10173] random: crng reseeded on system resumption [ 178.090610][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2280'. [ 178.102918][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2280'. [ 178.200391][T10191] loop3: detected capacity change from 0 to 128 [ 178.208806][T10191] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 178.285532][T10197] random: crng reseeded on system resumption [ 178.359052][T10203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44914 sclass=netlink_route_socket pid=10203 comm=syz.3.2288 [ 178.391083][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.391525][ T9589] Bluetooth: hci0: command 0x1003 tx timeout [ 178.439121][T10208] tipc: Enabling of bearer rejected, failed to enable media [ 178.472385][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 178.472404][ T29] audit: type=1326 audit(1766126722.828:34808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.503299][ T29] audit: type=1326 audit(1766126722.828:34809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.527401][ T29] audit: type=1326 audit(1766126722.828:34810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.551397][ T29] audit: type=1326 audit(1766126722.828:34811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.575223][ T29] audit: type=1326 audit(1766126722.828:34812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.599000][ T29] audit: type=1326 audit(1766126722.828:34813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.622876][ T29] audit: type=1326 audit(1766126722.828:34814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.647039][ T29] audit: type=1326 audit(1766126722.828:34815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.670670][ T29] audit: type=1326 audit(1766126722.828:34816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.694447][ T29] audit: type=1326 audit(1766126722.828:34817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10214 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 178.945944][T10238] loop3: detected capacity change from 0 to 512 [ 178.957272][T10238] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2302: bad orphan inode 15 [ 178.968268][T10238] ext4_test_bit(bit=14, block=5) = 0 [ 178.975233][T10238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.010908][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.069184][T10251] loop9: detected capacity change from 0 to 512 [ 179.080074][T10251] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2306: bad orphan inode 15 [ 179.104593][T10251] ext4_test_bit(bit=14, block=5) = 0 [ 179.111668][T10251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.164676][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.179852][T10261] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2312'. [ 179.262653][ T3623] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.465815][T10299] random: crng reseeded on system resumption [ 179.548053][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2329'. [ 180.078976][T10345] loop3: detected capacity change from 0 to 128 [ 180.086577][T10345] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 180.209201][T10349] loop3: detected capacity change from 0 to 764 [ 181.058883][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2360'. [ 181.271267][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.407881][T10392] tipc: Started in network mode [ 181.412935][T10392] tipc: Node identity a2c088d40ab4, cluster identity 4711 [ 181.420131][T10392] tipc: Enabled bearer , priority 0 [ 181.428052][T10391] tipc: Resetting bearer [ 181.463637][T10391] tipc: Disabling bearer [ 181.533105][T10396] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2365'. [ 181.545171][T10396] loop3: detected capacity change from 0 to 512 [ 181.564651][T10396] EXT4-fs (loop3): 1 orphan inode deleted [ 181.571109][T10396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.584052][ T3637] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 1 [ 181.584051][T10396] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.619665][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.739649][T10404] loop3: detected capacity change from 0 to 512 [ 181.747778][T10404] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.761788][T10404] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 181.769868][T10404] EXT4-fs (loop3): orphan cleanup on readonly fs [ 181.785471][T10404] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2368: Allocating blocks 41-42 which overlap fs metadata [ 181.799691][T10404] EXT4-fs (loop3): Remounting filesystem read-only [ 181.807572][T10404] EXT4-fs (loop3): 1 truncate cleaned up [ 181.815775][T10404] EXT4-fs (loop3): pa ffff888107a798c0: logic 1, phys. 41, len 23 [ 181.833144][T10404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.900971][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.970805][T10419] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 182.371896][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2381'. [ 182.508304][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.663372][T10443] all: renamed from team_slave_0 (while UP) [ 183.249332][T10469] netlink: 'syz.0.2390': attribute type 29 has an invalid length. [ 183.289725][T10449] chnl_net:caif_netlink_parms(): no params data found [ 183.420362][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.427769][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.436593][T10449] bridge_slave_0: entered allmulticast mode [ 183.443615][T10449] bridge_slave_0: entered promiscuous mode [ 183.461798][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.468959][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.476460][T10449] bridge_slave_1: entered allmulticast mode [ 183.483059][T10449] bridge_slave_1: entered promiscuous mode [ 183.514313][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.537244][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.571189][T10449] team0: Port device team_slave_0 added [ 183.584176][T10449] team0: Port device team_slave_1 added [ 183.620693][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.627796][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.653858][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.668567][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.675664][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.701888][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.752434][ T29] kauditd_printk_skb: 722 callbacks suppressed [ 183.752451][ T29] audit: type=1326 audit(1766126728.108:35537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.752546][T10449] hsr_slave_0: entered promiscuous mode [ 183.761293][ T29] audit: type=1326 audit(1766126728.108:35538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.783494][T10449] hsr_slave_1: entered promiscuous mode [ 183.819590][T10449] debugfs: 'hsr0' already exists in 'hsr' [ 183.825501][T10449] Cannot create hsr debugfs directory [ 183.831854][ T29] audit: type=1326 audit(1766126728.148:35539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.856317][ T29] audit: type=1326 audit(1766126728.148:35540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.880406][ T29] audit: type=1326 audit(1766126728.148:35541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.904778][ T29] audit: type=1326 audit(1766126728.148:35542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.929220][ T29] audit: type=1326 audit(1766126728.148:35543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.947259][T10489] random: crng reseeded on system resumption [ 183.954403][ T29] audit: type=1326 audit(1766126728.148:35544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 183.984325][ T29] audit: type=1326 audit(1766126728.148:35545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 184.008395][ T29] audit: type=1326 audit(1766126728.148:35546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10486 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85be8df749 code=0x7ffc0000 [ 184.165618][T10504] SET target dimension over the limit! [ 184.263164][T10449] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.273197][T10449] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.346148][T10449] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.356247][T10449] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.410913][T10449] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.420830][T10449] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.449388][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'. [ 184.495870][T10449] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.505767][T10449] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.520115][T10538] all: renamed from team_slave_0 (while UP) [ 184.552809][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.606870][T10449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.617837][T10449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.629555][T10449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.641898][T10449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.717340][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.736898][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.749353][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.756667][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.772627][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.779812][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.830433][T10565] random: crng reseeded on system resumption [ 184.892180][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.989909][T10449] veth0_vlan: entered promiscuous mode [ 185.000315][T10449] veth1_vlan: entered promiscuous mode [ 185.025028][T10449] veth0_macvtap: entered promiscuous mode [ 185.034056][T10449] veth1_macvtap: entered promiscuous mode [ 185.049681][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.064506][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.077759][ T3679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.087953][ T3679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.105038][ T3679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.123488][ T3679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.152322][T10584] pimreg3: entered allmulticast mode [ 185.160963][T10584] netlink: 'syz.8.2429': attribute type 29 has an invalid length. [ 185.267408][T10592] all: renamed from team_slave_0 (while UP) [ 186.679358][T10622] loop8: detected capacity change from 0 to 1024 [ 186.693672][T10622] EXT4-fs: inline encryption not supported [ 186.719047][T10622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.792547][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.805815][T10624] pimreg: entered allmulticast mode [ 186.822285][T10624] netlink: 'syz.3.2443': attribute type 29 has an invalid length. [ 187.217299][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2445'. [ 187.226459][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2445'. [ 188.804138][T10667] random: crng reseeded on system resumption [ 189.580546][ T3635] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.644746][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 189.644767][ T29] audit: type=1326 audit(1766126733.978:35607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.8.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c49ff749 code=0x7ffc0000 [ 189.675522][ T29] audit: type=1326 audit(1766126733.978:35608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.8.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff8c49ff749 code=0x7ffc0000 [ 189.699322][ T29] audit: type=1326 audit(1766126733.978:35609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.8.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c49ff749 code=0x7ffc0000 [ 189.723665][ T29] audit: type=1326 audit(1766126733.978:35610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.8.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff8c49ff749 code=0x7ffc0000 [ 189.747367][ T29] audit: type=1326 audit(1766126733.978:35611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10679 comm="syz.8.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c49ff749 code=0x7ffc0000 [ 189.784863][T10702] random: crng reseeded on system resumption [ 190.498252][T10721] loop3: detected capacity change from 0 to 512 [ 190.570136][T10721] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2473: bad orphan inode 15 [ 190.599727][T10721] ext4_test_bit(bit=14, block=5) = 0 [ 190.606657][T10721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.730432][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.900549][T10729] netlink: 'syz.2.2477': attribute type 39 has an invalid length. [ 190.936336][T10733] 9p: Bad value for 'rfdno' [ 191.093490][T10737] netlink: 'syz.3.2480': attribute type 39 has an invalid length. [ 191.129699][T10739] random: crng reseeded on system resumption [ 191.307870][T10742] loop8: detected capacity change from 0 to 1024 [ 191.316148][T10742] EXT4-fs: inline encryption not supported [ 191.334813][T10742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.403819][T10749] loop3: detected capacity change from 0 to 512 [ 191.419947][T10749] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2484: bad orphan inode 15 [ 191.425239][T10745] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 191.431287][T10749] ext4_test_bit(bit=14, block=5) = 0 [ 191.445535][T10749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.474901][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2484'. [ 191.523024][T10752] loop2: detected capacity change from 0 to 512 [ 191.534365][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.611433][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 191.617503][ T9589] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.638029][T10752] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2486: bad orphan inode 15 [ 191.657446][T10752] ext4_test_bit(bit=14, block=5) = 0 [ 191.664038][T10752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.686247][T10757] loop9: detected capacity change from 0 to 128 [ 191.711203][T10757] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 191.757236][T10449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.835898][T10767] random: crng reseeded on system resumption [ 191.949970][T10772] loop3: detected capacity change from 0 to 1024 [ 191.973576][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.983129][T10772] EXT4-fs: inline encryption not supported [ 192.153976][T10772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.169916][T10778] tipc: Enabled bearer , priority 0 [ 192.336463][T10777] tipc: Disabling bearer [ 192.462128][T10782] all: renamed from team_slave_0 (while UP) [ 192.662004][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2499'. [ 192.663399][T10788] loop2: detected capacity change from 0 to 128 [ 192.683983][T10788] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 192.684858][ T9395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.725618][T10790] loop8: detected capacity change from 0 to 512 [ 192.778059][T10790] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2500: bad orphan inode 15 [ 192.788908][T10790] ext4_test_bit(bit=14, block=5) = 0 [ 192.794899][T10790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.839370][ T7254] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.848843][ T29] audit: type=1326 audit(1766126737.188:35612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 192.873620][ T29] audit: type=1326 audit(1766126737.188:35613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 192.898603][ T29] audit: type=1326 audit(1766126737.188:35614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 192.902080][T10800] pimreg3: entered allmulticast mode [ 192.923153][ T29] audit: type=1326 audit(1766126737.188:35615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 192.952007][ T29] audit: type=1326 audit(1766126737.188:35616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a0d0f749 code=0x7ffc0000 [ 193.019111][T10815] netlink: 'syz.2.2510': attribute type 39 has an invalid length. [ 193.142176][T10819] loop9: detected capacity change from 0 to 1024 [ 193.152525][T10819] EXT4-fs: inline encryption not supported [ 193.203325][T10819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.284431][ T9242] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.392771][T10849] loop2: detected capacity change from 0 to 512 [ 193.429296][T10849] ext4: Unknown parameter '.' [ 193.484057][T10849] loop2: detected capacity change from 0 to 512 [ 193.497831][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 193.520511][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 193.531500][T10849] EXT4-fs (loop2): mount failed [ 193.584260][T10849] loop2: detected capacity change from 0 to 512 [ 193.607995][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 193.631088][T10849] EXT4-fs (loop2): mount failed [ 193.643075][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2524'. [ 193.676796][T10849] loop2: detected capacity change from 0 to 512 [ 193.740898][T10857] ================================================================== [ 193.749123][T10857] BUG: KCSAN: data-race in mISDN_ioctl / mISDN_read [ 193.755831][T10857] [ 193.758348][T10857] write to 0xffff88812d848280 of 4 bytes by task 10864 on cpu 1: [ 193.766357][T10857] mISDN_ioctl+0x2fb/0x550 [ 193.770808][T10857] __se_sys_ioctl+0xce/0x140 [ 193.775435][T10857] __x64_sys_ioctl+0x43/0x50 [ 193.780050][T10857] x64_sys_call+0x14b0/0x3000 [ 193.784748][T10857] do_syscall_64+0xd8/0x2c0 [ 193.789370][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.795287][T10857] [ 193.802220][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 193.804310][T10857] read to 0xffff88812d848280 of 4 bytes by task 10857 on cpu 0: [ 193.804334][T10857] mISDN_read+0x1f2/0x470 [ 193.812069][T10849] EXT4-fs (loop2): mount failed [ 193.819191][T10857] vfs_readv+0x3fb/0x690 [ 193.819224][T10857] do_readv+0xe7/0x210 [ 193.837051][T10857] __x64_sys_readv+0x45/0x50 [ 193.841761][T10857] x64_sys_call+0x2831/0x3000 [ 193.846552][T10857] do_syscall_64+0xd8/0x2c0 [ 193.851184][T10857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.857107][T10857] [ 193.859441][T10857] value changed: 0x00000000 -> 0x00000001 [ 193.865257][T10857] [ 193.867591][T10857] Reported by Kernel Concurrency Sanitizer on: [ 193.873756][T10857] CPU: 0 UID: 0 PID: 10857 Comm: syz.0.2523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.885281][T10857] Tainted: [W]=WARN [ 193.889179][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.899519][T10857] ================================================================== [ 193.917325][T10849] loop2: detected capacity change from 0 to 512 [ 193.926465][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 193.933902][T10849] EXT4-fs (loop2): mount failed [ 193.966049][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 193.973472][T10849] EXT4-fs (loop2): mount failed [ 193.992838][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.000346][T10849] EXT4-fs (loop2): mount failed [ 194.034324][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.042725][T10849] EXT4-fs (loop2): mount failed [ 194.059978][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.067449][T10849] EXT4-fs (loop2): mount failed [ 194.080474][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.087904][T10849] EXT4-fs (loop2): mount failed [ 194.104076][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.111439][T10849] EXT4-fs (loop2): mount failed [ 194.125124][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.133411][T10849] EXT4-fs (loop2): mount failed [ 194.145388][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.153008][T10849] EXT4-fs (loop2): mount failed [ 194.165252][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.172739][T10849] EXT4-fs (loop2): mount failed [ 194.184718][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.192974][T10849] EXT4-fs (loop2): mount failed [ 194.205287][T10849] EXT4-fs (loop2): failed to initialize system zone (-117) [ 194.212632][T10849] EXT4-fs (loop2): mount failed [ 194.222886][T10849] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 194.222943][T10849] EXT4-fs: failed to create workqueue [ 194.238200][T10849] EXT4-fs (loop2): mount failed