last executing test programs: 1m11.396212769s ago: executing program 4 (id=5): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x11, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x246}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x104d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x10a0b0, 0xd8, 0x0, 0x3, 0x7, 0x1000084, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x18) ioprio_get$pid(0x2, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e25, @rand_addr=0x64010101}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) 1m10.984381286s ago: executing program 4 (id=7): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") 1m9.676114024s ago: executing program 4 (id=13): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x8, 0x8000, 0xf, 0x2, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x68, 0x0, 0x61, 0x29, 0x0, @local, @loopback, {[@lsrr={0x83, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102, @loopback, @local]}, @generic={0x83, 0xf, "37f25fd30cb9fe54d15a2a00f1"}]}}}}}) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_dump={0x3f, 0x7fffffff, 0x4, 0x60, "24166c4a0c03a21c9440fb3bf48bd2c7f0066574d44ec01dfeca3a33006342bf5a0fb66b1a49a975fdfc82f16f069ce7226fe26feb939d6ded9dd680e04fa2f5a97c4789a7fcd90b03640b748af6933aa6c64a2fff10ee8f462a00d187b58a11"}}) unshare(0x2040400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'lblc\x00', 0x16, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c8, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) listen(r1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) ptrace(0x4208, r8) socket$inet6_tcp(0xa, 0x1, 0x0) 1m9.547759885s ago: executing program 4 (id=16): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x769, &(0x7f0000001880)="$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") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080)='ext4\x00', 0x1000040, 0x0) socket$netlink(0x10, 0x3, 0x0) msgget$private(0x0, 0x1c0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001700)={'erspan0\x00', &(0x7f0000001580)={'gretap0\x00', 0x0, 0x10, 0x700, 0x9, 0x1, {{0x4f, 0x4, 0x3, 0xd, 0x13c, 0x68, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp={0x44, 0xc, 0xfe, 0x0, 0x0, [0x401, 0x7b57]}, @timestamp_addr={0x44, 0x2c, 0x8e, 0x1, 0x2, [{@remote, 0x9d8}, {@local}, {@rand_addr=0x64010101, 0x36}, {@multicast1}, {@empty, 0xb3fe}]}, @cipso={0x86, 0x4e, 0x3, [{0x0, 0x6, "52bb7316"}, {0x1, 0x8, "f8c7a6dedb92"}, {0x6, 0xa, "6500b199ddfc0c38"}, {0x4, 0x2}, {0x6, 0xb, "2fd9fb3b4ab402853d"}, {0x6, 0xa, "44bca8668da09c6a"}, {0x6, 0xe, "5fc3319c917b44afbb10eede"}, {0x5, 0xb, "c4e84f6c59a0bfcfb0"}]}, @timestamp={0x44, 0x1c, 0xbf, 0x0, 0x0, [0xd, 0x7fffffff, 0x5, 0x7a6, 0x3, 0x8]}, @timestamp={0x44, 0x10, 0x2e, 0x0, 0x0, [0x3, 0xffff, 0xe12c]}, @ssrr={0x89, 0x23, 0xc2, [@local, @local, @remote, @multicast1, @remote, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}, @rr={0x7, 0xf, 0xf5, [@rand_addr=0x64010102, @broadcast, @multicast1]}, @cipso={0x86, 0x2b, 0x0, [{0x5, 0x12, "75f8d99de722395f1048d20065814ccc"}, {0x6, 0x7, "56a006118b"}, {0x1, 0xa, "a16ae0d2844b44ae"}, {0x2, 0x2}]}, @timestamp={0x44, 0x18, 0x6e, 0x0, 0x0, [0x0, 0x7, 0x800, 0x2, 0x100]}]}}}}}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xfa, &(0x7f0000000140)=""/250}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) socket$inet6(0xa, 0x2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) 1m9.203377776s ago: executing program 4 (id=18): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000e7ffffff7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r3, 0x0, 0xfffffeea) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=r2], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) r8 = io_uring_setup(0x7fc0, &(0x7f0000000400)={0x0, 0x3, 0x2}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x63) mount(&(0x7f0000003340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000300)='./bus\x00', 0x6200, 0x5d) preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0700000004000000080200000e39e98a9be5412b193c4865ca4a6627cff78e2a1b177699e40037a6e86f3dbfe1138a78450f5d12cf826550701754a57d04e5330aabac0cebcadfd70890e0b6ad9c54b46bf2afeff8a5f6b80058ccb1ad7b3be03a0df342ef08527ecc6df9052b3c3534e493f56792d076e8d14182028ed1d0636b89ca8e5549d041b1493e286beff73ba2cf91b7eafa25d17f08a59d861e8f6f612ea886db62b6e031c804b5e7c9ef59c40025e95cafa1a4f2b7883f0031fc0573ea804ea4799650a8d66ee6a2cc6ba5a78a"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[@ANYBLOB="640000000e060108003cedcc31767e1600000000000000030000000900020073797a310000000005000100070000000500010007000000050001000700000005000100070000000900020073f84fef3d289b86d500020073797a30000000000900020073a0649654d4ff7986c638aa7cf5880793eed32bb100dea767001b524aecbaeb3b10"], 0x64}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='rpcgss_unwrap_failed\x00', r11}, 0x18) 1m5.857308726s ago: executing program 4 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x7ff}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4895}, 0x804) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) 1m5.81433787s ago: executing program 32 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x7ff}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4895}, 0x804) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) 42.439627605s ago: executing program 1 (id=400): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf25030009008000adf0d495f39d55c2e2d83e6dd2c0bb3f00001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0xffffffffffffffdf}, 0x1, 0x7}, 0x8d0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf25030009008000adf0d495f39d55c2e2d83e6dd2c0bb3f00001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e24000000090000000000000000000000000000000006000000000000000200130003"], 0xffffffffffffffdf}, 0x1, 0x7}, 0x8d0) (async) 42.002627114s ago: executing program 1 (id=403): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000020000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47f, &(0x7f00000004c0)="$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") 41.842042939s ago: executing program 1 (id=405): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, 0x0, 0x8c) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xf, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='ufshcd_command\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@md0, 0x0, &(0x7f0000000300)='./file0\x00') (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r8 = fsmount(r7, 0x0, 0x20) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r8, &(0x7f0000000140)='./file0\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) 41.732109559s ago: executing program 1 (id=407): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) rt_sigpending(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000240)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0xc, 0x40800) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x5, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c96e", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x18) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f00000000c0)) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) 41.239576553s ago: executing program 1 (id=419): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) r2 = socket(0x11, 0x800000003, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000100)=0x401, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount$bind(&(0x7f0000000340)='./cgroup/../file0\x00', &(0x7f0000000500)='./cgroup/../file0\x00', &(0x7f0000000540), 0x60, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r7 = syz_io_uring_setup(0x440b, &(0x7f0000000180)={0x0, 0x6615, 0x10000, 0x2, 0xb7}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r7, 0x29ab, 0xd480, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x80000, 0xfffffffd, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0xf], 0x0, [0x8, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7da8], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff8}]}}]}, 0x98}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x1, @thr={&(0x7f00000000c0)="8249fea854861c20c30391c56aa6bfc101664a6a9f28224191b92f5bf811850f2b5b4d024d224aaa", &(0x7f0000000400)="f69541d59466cb7ff1b1605dd117aebdc5b036f67d7a4bdc9ad0b7ee00564931228126d3b191b95020d8d8527cc9c0b4492d672301ee677d4c80bc7438690fa6e0b1ac5e26613d2690ff31467c0c5ba84f66437d9bc6dc21de24502b2a2786dd0c3fb65193bab403f7f777f5e695cc809277435e007264bae0528fb6391c65e2a3d0cb87b0de7eb8a79be7c7956eae436bce66ee26aec956bf667ee281d3da10fce0c51985c94fcc6e2f6a585344f217796193ef834bb45cbdd343dca037bd08ee7cd9f7b05862d831631fe9f1da1b4b11"}}, &(0x7f0000000240)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) 40.93616275s ago: executing program 1 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r10 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb863f187dc8f886dd637caa2700083c01fc0000000000000000000000ff0200000000000000000000000000012f00000000000000869a61e270dc5ea6da1c14699f32708b3da9e7c235dba70b8f2b9477fb66390ae88b3d1bdb3fc3ef5efa0ae7aa4695a4fa988c2adf8ea5277879ecad90037714fdef8ffc14e2ea672dcc9a7ca41c2493bf3bb3602af6b4c274c4c55c950e4f"], 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r11}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RELDISP(r12, 0x5605) fsmount(r10, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 40.9358197s ago: executing program 33 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r10 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb863f187dc8f886dd637caa2700083c01fc0000000000000000000000ff0200000000000000000000000000012f00000000000000869a61e270dc5ea6da1c14699f32708b3da9e7c235dba70b8f2b9477fb66390ae88b3d1bdb3fc3ef5efa0ae7aa4695a4fa988c2adf8ea5277879ecad90037714fdef8ffc14e2ea672dcc9a7ca41c2493bf3bb3602af6b4c274c4c55c950e4f"], 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r11}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RELDISP(r12, 0x5605) fsmount(r10, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.296992576s ago: executing program 0 (id=958): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x8, &(0x7f0000003140), 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) syz_pidfd_open(0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="ff0b000000ef0d00000000000000000018110000", @ANYBLOB="3ea52673be90853d5965b411bed4", @ANYRES32=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r5, 0x209, 0x40, 0x1000000, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000004c0)={@private1, 0x1, r6}) (async) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x48, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x11}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (rerun: 64) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x8}, 0x18) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r9, 0x4) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x40, r11, 0x209, 0x0, 0x4, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'gre0\x00'}) 7.231626822s ago: executing program 0 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000001640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) (async) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, 0x0, 0x4000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='virtio_transport_alloc_pkt\x00', r6, 0x0, 0x8000000000000001}, 0x18) (async) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) listen(0xffffffffffffffff, 0x8) 6.716167948s ago: executing program 0 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0xfffffffffffffffd, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(r0, 0x3, &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r3]}}], 0x20, 0x8881}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0xa416, 0x32, 0x43a1bd56, 0x7, 0x9, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0xb6, 0x3, 0xf2, 0x0, 0x81000000, 0x24, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000180), 0xa}, 0x880, 0x10001, 0x2, 0x4, 0xb6, 0xf, 0xb0, 0x0, 0x5, 0x0, 0x3be}, r0, 0x400000000b, r5, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r8}, 0x18) 6.334992472s ago: executing program 0 (id=970): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001240)='./file2\x00', 0x14880, &(0x7f00000003c0)=ANY=[], 0xfe, 0x1222, &(0x7f0000003440)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fbffedff00000000000000008500000041000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000fbffedff00000000000000008500000041000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket(0x2, 0x2, 0x1) (async) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) sendto$packet(r6, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000740)={0x0, 0x2, 0x7}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000b40)={r10, 0x5, 0x9, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r13], 0x68}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r13], 0x68}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0x1, 0x2}, {0xd}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.332257461s ago: executing program 5 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="8000000000000000b703000000000000850000001b000000b700feffffff000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000380)={0x17a6, 0x1, [{0x7, 0x1}]}) 2.273548866s ago: executing program 5 (id=1008): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x9, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x6a040000) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f0000000040)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r6 = socket(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x379) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x2, 0xb7, 0x9, 0x36b, 0x9, 0xe, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x44ac0092}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) 2.184083365s ago: executing program 3 (id=1009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xf, &(0x7f0000000640)={0xf7, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x10, 0x2, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0xfffffffd, 0x2}}) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x2, 0xc04}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') 2.028617839s ago: executing program 3 (id=1010): r0 = socket(0x18, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20060400) r2 = socket(0xa, 0x5, 0x0) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000d0"], 0x18, 0x48d5}, 0x8050) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ab6181fc8c946385758d9b437728808cbac7c20dea7aa3483188b0301b31cf059f4f33d6bc6fa539c84c507b5c4af440b01e1185a06b71caca8575ad137753a9eb8f99dbbbc72926096b0f05015bacdbae6ac369b1cff4869150d98d06631a1f431ace990ded237b4b69b2c3fe93d54122165fd657f585cfc339b316f3a6ada072eb28e7e1767bc0800f282cba2bbf2d20de23ed4311a817d89c766061b8857da351b6a5138703586b083276f32546", @ANYBLOB="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", @ANYBLOB="f37f4eb94d84bb4899fca71ef42cf20695f467548dc1fc98342b88e60516b3d77b52e34ec18367e0c4ed5a9387e27107d904580d290a294903e14e264d48ba", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1], &(0x7f0000000380)='GPL\x00', 0x3745, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x140) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$rxrpc(0x21, 0x2, 0x2) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = getpgrp(0x0) r11 = syz_pidfd_open(r10, 0x0) fremovexattr(r11, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.807282288s ago: executing program 3 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000002010300000c0000000000000340040006001240000400000800100000000fff"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@journal_path={'journal_path', 0x3d, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='GPL\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r10, 0x0, 0xffffffffffff8001}, 0x18) 1.616105946s ago: executing program 5 (id=1015): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x81, 0x7ff}, 0x2400, 0x0, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0xfffffffd, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xb1, [@multicast1]}, @timestamp={0x44, 0x4, 0x81}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="b4ecab0aa6f58152e056964b255d6f6b5e76056bc5969d0c62dc037c13f2de91feef03a6c8a69d05d63b83fd63e310e49483e497d1b531754aa4d4417b4b014943879f8dfdbb7296e1d2ac59fad13611c791c0349553f6aa03556b8a1505d488c0320bb6196ea6340affa240065e0f67a13a61e63ea90c9d10dc1d6043f05d0b4a88401f4b29c7a4fb887b26432c8f9871a2b098077d88153462b7b35dbaba09b9b6e44c18795c11d10e56850f2130d87e950dc867c455961004", @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0, 0x42}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a00010, &(0x7f0000000540)=ANY=[], 0x2, 0x564, &(0x7f00000010c0)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x00! \x86\xad\xaaz\xae\x00\x00\xab\x1fl\xe4\xde\xea,O\xdfy\xe8\x151Z\xefW\xbe\xb4\x11\xe0N\x01\x04\xe8\x18Ag\x9c\xf2*wt\xf7\xe2\x8fI@\x16L\x06Q\xd4\xa2\xd1\xfd\x84?0\xdb\xfc\x1c\xe2iZ<\xbd\"\xc8\xeaO\x8b\xc7!\x02\xb0\xd3\"_\xe6\xab\x86\xf3\x9e;\xdd\x03\xd9#\xc0Z\x11K\x90\v\xd9G\xd2\xb1\x00\xf5[\xad\xd6\x11XX\xb1\xe1O\xca2\xe2\x17\x81\x1a9\xfd\xcaauS\xd9\xd0p\xc3=|0\xb6>C\x9b\xf1P*UJ\xc2pDe\xd0\xd9\xfa\xf6J\xdb\x82\xc5:\xdfG\x8cPb\xc2\xf5\x05\x86,\v\xe9'}, {0x20, '\'#%}'}, {0x20, '##,'}, {0x20, '}^F)-'}], 0xa, "f3c08eac5e6766d22545c1717d9f4fb7c76de01ce69a389f052e01d2f9abaeb85e080c1a2e8720c2e0bfde4dc438eb48153578c7bddd12f50ccf7eb8745cc2879c4b3234ee6fe522457749e4f3e85ca31a643fc088edea079d0d86995940b63e5fa5fcc14069b7709dea7aa128ad2054cb51bd50cb606a93c0aada6b8bb81e5623988a4425bd24a7d06fdd7645fe7ea116bfbdb16ce1c10b86ef95ad23be3d30fd217d280ef30880f6465b14210b994ddd1e59d3ee"}, 0x172) 998.394311ms ago: executing program 5 (id=1018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000036000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f0000000100)='GPL\x00', 0xa, 0xc5, &(0x7f00000001c0)=""/197, 0x0, 0x1c}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfc, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x2400}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000004000000", 0x30) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x37}}, 0x14) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x48, 0x2f, 0xff, @private0={0xfc, 0x3, '\x00', 0xff}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88f7, 0x0, 0x0, [0x81, 0x9]}}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x288, 0x1000000, 0xffffffff, 0x288, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x4}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x1f, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0x29}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'ip6erspan0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x438) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x10ba, &(0x7f0000002480)=ANY=[], 0x0) 849.592944ms ago: executing program 3 (id=1022): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0xb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0xf, &(0x7f0000000640)={0xf7, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x2, 0x9) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x2, 0xc04}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) 730.058765ms ago: executing program 5 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = dup(r1) sendto$packet(r2, &(0x7f0000000180)="008220", 0xfffffffffffffe0a, 0x5e0ffc3d130561ca, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x8, &(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000040000850000001b000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r4 = gettid() r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r9}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000874000/0x2000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r10 = fsmount(r5, 0x0, 0x0) fchdir(r10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x4, 0x7, 0x7f, 0x0, 0x4, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x2, @perf_config_ext={0x5, 0xee6}, 0x2058, 0x6d92ea5c, 0x0, 0xc, 0xb097, 0x1, 0x1, 0x0, 0x47, 0x0, 0xffffffffffffff81}, r4, 0xb, r10, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) 728.959655ms ago: executing program 6 (id=1025): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000002e7057b8af8ff00000000bf23000000000000000200f8ffffffb703000008000000b7040000000000008500000016020000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0xffffffffffffffff, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9, 0x0, 0x8000000000}, 0x18) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltaction={0xdc, 0x31, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x787ed56b}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xaf}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7a59}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4081}, 0x0) io_submit(r10, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x5, 0x0, r2, 0x0}]) 581.611828ms ago: executing program 3 (id=1027): socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='ext4_fc_stats\x00', r0, 0x0, 0x400002}, 0x18) r2 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="f2014573320c2ad69f2c42bcd0aacfc1c06036f4b6f336b4d12b0233a7512488d2776f294000eccb6d754706"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4080}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000002ac0)={0x3, 0xf, 0x7ff, 0x8, 0x81, "0af20100aaba0000000000003db1d981660d49", 0x6, 0xe0000000}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000a00)=""/4096}, 0x20) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='page_pool_state_release\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) writev(r5, &(0x7f0000001140)=[{&(0x7f0000000700)="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", 0x234}], 0x1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getpgrp(0xffffffffffffffff) 479.224637ms ago: executing program 3 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x60}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000", @ANYRES16=r4, @ANYBLOB="0000008000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x2, 0xa, 0x73) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYBLOB="085ba7e4cd97de1f7d191f1b53f5251b853c698b9acc1cfce7c57618931f4428c903abdbb91fe33d29d4ae67631f7b16e1cca979bbd972d4610956175874f670670ebb4510f3c08a7145fbafee8b4d2eb8480802a36e2d3b509c80fde999a9af7ded915c920fd0c7ddd95286ea5c9a1db2fdfa7c7e292dd6a2f0918fbda5f5b98c9d2ef31fd91aa42e5d6053b161230bf02b3bb87c9f3c3e22026904cd76c96a7f137ec753e47a", @ANYBLOB="f002ff759d2a422a50f6b6f3351e50efc5b5ed654e5eef91a192bb829d74338f27ef446c6457b2d75065fa8113d94f6965cf1741718b6ffbb73d9c8c254bdb4487c1151cab70081dc98dfbc4d8cd1109c42c1fcb1593ec91f5a5c96f9d3b64a20ac733cdf664a0db28"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) close(r10) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=r9], 0x0) ioctl$SIOCSIFHWADDR(r10, 0x40095505, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r11}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000000), 0x560c89bb) creat(&(0x7f0000000200)='./file0\x00', 0x20) 478.880827ms ago: executing program 2 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) rseq(0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000200000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47f, &(0x7f00000004c0)="$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") 469.506588ms ago: executing program 2 (id=1030): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x8800000, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) (async) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x8800000, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) (async) 446.529421ms ago: executing program 5 (id=1031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x80, 0xc4, 0x5, 0x8}, {0x787a, 0x6, 0x0, 0x8}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) pipe(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r6, 0x0, 0x69) 404.011814ms ago: executing program 6 (id=1032): socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc8, 0x30, 0x53b, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x22, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc8}}, 0x0) (async) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) (async) sendfile(r7, r6, 0x0, 0x1003ffff) sendfile(r7, r6, 0x0, 0x7ffff000) 379.945286ms ago: executing program 6 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000000)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c833, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44080) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0x1010, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x7, 0x3a, 0x1000, 0x2, 0x0, 0x0, 0x2}, 0x1c) setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000200)=0x7, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000100)=ANY=[]) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) syslog(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) 331.042121ms ago: executing program 6 (id=1034): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+C&', 0x3a, '\xff\xff\xff\xff\xff\xff', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x50]}, 0x33) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 288.248004ms ago: executing program 0 (id=1035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x73b, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x7}]}, 0x18}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r0, 0x0, 0x1002}, 0x18) (async) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) (async) io_setup(0x8f0, &(0x7f0000002400)) 282.921995ms ago: executing program 2 (id=1036): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x8, 0xb, 0x208, 0x7, 0x4, 0x9, 0xffffffff, 0x4, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x84, "891174ef4f32255a57482d10f56525460ce90174fbad5c4af2f08b5b25cc3990ed467fa721948f9c75c1a896965a7f09b53ce3ad84e957d948766fb32cf8a68f8bdbee99b9ea6d9f95e40714ce31e1480721e062c587c057f4bca27a017dce10416ba78c1eb46b9de1e85d59c4464d345cf362da46c45085aca8a503cbcd9c03feec6b6e"}, &(0x7f0000000140)=0x8c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x0, 0x1, 0x244a8720, {{0x1a, 0x4, 0x0, 0x10, 0x68, 0x66, 0x0, 0x2, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, {[@rr={0x7, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast]}, @generic={0x82, 0x11, "a7bffab6456bd9f42583ca0547b1ee"}, @timestamp={0x44, 0x1c, 0xd3, 0x0, 0xd, [0x6, 0x1, 0x8, 0x1, 0x9, 0xaa]}, @end, @generic={0x94, 0xc, "38299f5608b21f210cdc"}, @lsrr={0x83, 0x7, 0x6d, [@local]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1}}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x30]}}, &(0x7f0000000300)=""/4096, 0x6b, 0x1000, 0x1, 0xff, 0x10000}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', r2, r3, 0x3, 0x5}, 0x50) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000013c0)={0x0, @adiantum, 0x0, @desc4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x1, 0x80) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001440)={0x0, "b672af"}, 0x6) ioctl$SG_IO(r5, 0x2285, &(0x7f00000015c0)={0x0, 0xfffffffffffffffe, 0x1f, 0xb, @buffer={0x0, 0x80, &(0x7f0000001480)=""/128}, &(0x7f0000001500)="1aaa96ccf76bb0d7dd3353ab4709d657388ce54c8556afb3b9e4a1353aa4d3", &(0x7f0000001540)=""/60, 0x6, 0x10010, 0x2, &(0x7f0000001580)}) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001640), 0x1, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f00000016c0)={{r0}, 0x7, &(0x7f0000001680)=[0x0, 0x7, 0x4, 0x8, 0xfc, 0x61aa, 0x7ff8000000], 0x6, 0x2, 0x1}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000001740)={0x1000, 0x14, 0x8, 0x6, 0x4}) symlinkat(&(0x7f0000001780)='./file0\x00', r5, &(0x7f00000017c0)='./file0\x00') r7 = accept4(r0, &(0x7f0000001800)=@l2tp={0x2, 0x0, @private}, &(0x7f0000001880)=0x80, 0x100000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x5, 0x0, 0x6, 0x26dc, 0x2434, r6, 0xffff, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001ac0)={'gre0\x00', &(0x7f0000001980)={'tunl0\x00', r2, 0x8007, 0x40, 0x6, 0x1, {{0x42, 0x4, 0x0, 0x5, 0x108, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x0, 0x11, "1f6dbd49cf444f09a23c99b3f0c451"}]}, @timestamp_prespec={0x44, 0x3c, 0x53, 0x3, 0x7, [{@multicast1, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0xfffffff2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x26}, {@multicast1, 0x5}, {@private=0xa010102, 0x8}, {@multicast2, 0x2}]}, @timestamp_addr={0x44, 0x54, 0xa4, 0x1, 0xa, [{@remote, 0x2}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x5}, {@remote, 0xfff}, {@private=0xa010100}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x30e6}, {@multicast1, 0x7}, {@multicast1, 0x2}]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x7, [{@multicast2, 0x2b1aec64}, {@loopback, 0x121c}, {@broadcast, 0x3}, {@remote, 0x4}]}, @generic={0x44, 0x4, "ca4a"}, @timestamp={0x44, 0x1c, 0xdb, 0x0, 0x6, [0x4, 0x8, 0x8000, 0x8, 0x5, 0xba02]}, @ra={0x94, 0x4}]}}}}}) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000001b00)={0x1, 0x8, 0x9, 0x5, @vifc_lcl_ifindex=r10, @broadcast}, 0x10) r11 = accept4$unix(r9, 0x0, &(0x7f0000001b40), 0x80000) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000001dc0)=0x0) lstat(&(0x7f0000001e00)='./file1\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001f80)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000002080)=0xe8) r17 = getgid() r18 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000002540)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000002640)=0xe8) statx(r5, &(0x7f0000002680)='./file0\x00', 0x800, 0x100, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r11, &(0x7f0000004fc0)=[{{&(0x7f0000001b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c00)="d57df5ba5bf26a0c3f906ec7c2bb0a14f8ce9d2c8a8f533bf3e32f23cd9cd786e3120590ac666be25458f3ad24456d187cf83b76217ee4611620a784fd120a47af75201f2945390d9d46b63fdc58db0bbae036964d6517cc0b6df9d8cf72fecb1017139f2e59105a5105b450c8fa997bab7f210ea0def546ebe8a56abe4acd12", 0x80}, {&(0x7f0000001c80)="e0dea7631056a843d39aecd1fcee2ca3a3da3c62cce6a00467291c5f271afcfefda3f33693d03a4d1dbbbd0236379fde9dbf6d40102174b23ab99db361ea7ca57578c1141d2cf111ab3d354eafedf34af70f83186974f3c73a034737e28911655323fc3930cd2ab69d1683730bef48ccdbcbece35cc79196685b95c096bd0af7a9ec8adfc215985a3419bd92376d6facf0bcf5099e29defca2d0cb3a8484c03386ce", 0xa2}, {&(0x7f0000001d40)="44aa39e779ea4d23c2d7887703847adda9d21a63e4b9b11ae0b8c4e5a08d7a2a76081b7e", 0x24}], 0x3, &(0x7f00000020c0)=[@rights={{0x24, 0x1, 0x1, [r5, r6, 0xffffffffffffffff, r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r8, r5, r6, r3]}}, @rights={{0x1c, 0x1, 0x1, [r7, r4, r8]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0xa8, 0x24048081}}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002180)="dfea7e85bbb51b86ab9c97475f8efd1002589d798885dfd03756eda1023d2ec1250ce8e1c3cc4e386790829d6a6bb42e6acf078ae54eeb6da79e9f028863bedf2f4cf3df1e94999631727749aaee4581496b3e159d2b9829143a31e0b2f2211863b915a32ea0bd1aeaaccc86081f3374f7ee12382aa1", 0x76}, {&(0x7f0000002200)="952b309bcb794887c3174e6f1c014bbaf2abe92050c79655b234f7145ee38df0694542c0835d299454715edb3043d318892324a95e3d3bd69f8f62f92ec83b1a907d3030acb629cf66a86ad9", 0x4c}, {&(0x7f0000002280)="d17ab874e6003257ef2d8a6375a07d783a8427fdc2348e0b64c81076bf94ae9b048a7b7ca8dee7ab3d64cea36480ff6410192d20d0242dd7d60335a7325c513ec0413b824ec63b49b0e331b56844c680dace99d1772db8b4ad19dc118577cdabac0342d0fdcacec42a81a1a87881d745e2541a61607f040e62848d9ac252bd975d6394a8a1b141ba8200172e64a355cd1dff0b9e6dee987e68c2", 0x9a}, {&(0x7f0000002340)="5f0321a117bfacbd5bc43b7c4773c7be0f5882ff8a3a46b07f284ff32f538ba6a28e4f01e4104f5e0c3302805ccdb3196820e932af61a64c", 0x38}, {&(0x7f0000002380)="3893c97b7d38e272586539e30be53af2fac96a9424baa5ce21ba302c3876d12f3b058281f92c5b3421111eab63c1f39de842ca098aee8cb6e1a4cefdcf847d1518e875d830eff1b8646dea595537791a8128289639719e97e033edeed13e4ac8f0d24b756d", 0x65}, {&(0x7f0000002400)="3add39832fb61ff9926ee0b08c298af0bad25b5513a14e3fb7b531b736e282a8b3a0fcfd243473c50721a1391f42de99bae89bff43f6ce78f61985372b381c77b2ee07139d26aac90fbb07fcf7b61bef4fc749e5f1222820a40186d3e37f2a006ab4466a2c6bfe9bd7063bde1017303b778fb8c2e9ec1dea48642936930c48c0128228a5b164ad931ffbb938d9921036eda0e799b21cec634f743beb47b2ff525ba9f80b9592f5bfd076a866a71662f6ad8a", 0xb2}], 0x6, &(0x7f0000002d40)=[@cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x18, 0x1, 0x1, [r5, r8]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r9, r4, r7, r6, 0xffffffffffffffff, r7, r7]}}], 0xe8, 0x10}}, {{&(0x7f0000002e40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="3e8f57c48feeacf5ef64e238b0ad8de05d39fa6b228d358eecd19b52b3a4cb00abf20bab26cd56ec370334777cc5dabaa3ab5b30a760f12139d9d4e104191c4081afce7f83ca1fa88c32a6877935e2673aab72147b70e93a851fb99cead198d175d1f8", 0x63}, {&(0x7f0000002f40)="bd0413f7f6e6b093c62e1ff06484b1df0e556a37f04f7756435be5556507dbdab1a9b27760e8432173744fbcb40e2efe1219fb5da298d114ef15c96c5883cdca0df77074241033608e4762e98eb5516b4373bd8d92fbc752b2897cfcf9e65d0264972434", 0x64}], 0x2, 0x0, 0x0, 0x4}}, {{&(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003080)="5e076c505d132c8d68dbc212a658b83eb487ba744e162385c36ea87146fc4a5a11126d", 0x23}, {&(0x7f00000030c0)="45208d193393246f4624cac7660f8e283ea323f5cf37a33238d863a6dbe6a0", 0x1f}, {&(0x7f0000003100)="8f428b335e32e33a3f64b8ba04e1169bb22a1e98ce4d670d6b1ddbda64760073e528f4774bac4f4cc82d5a01d52881b9047e7a1366164b185126d9532f1fbd6aed5856695af1a57f9c7c7e5af1bad3256bf37cbcd7a1abf09bedb00dd4891b64a43acc809bc9751f876f2d3549a1ce82c56afcbf4393237195a1b2a997ddbf", 0x7f}, {&(0x7f0000003180)="550ff87db605f3ccedbe1bad281e9f96928efc52099a70426e1b4bf166167e87a241f1b8d8deceda48e8d78972320f43c6e3842fbf73127e6c08b0654ce40765688c83a9340bb427652f6ae3e975e9f597532a4cb390183b3278e09a7c", 0x5d}, {&(0x7f0000003200)="ffb68f85b170451340dedcca792a82f08b5eb5a839774f0e2a0db6e3ce3edd930c950bff445fbb7df072300ceb8397c43582de2cf4e3f0ed368b2669a02dacd762a1c1c1df4536a547c24c424d0b3d486783cf103c3df9be1dbee30ed82f46e5dcb40dd239d94ddf13aaee81d36236ed034975061872d689b3828e683798ff2697271708480ce1bd268ae1b68e3580e4bc7c4f1b4c403f30fb5fdbd11b03652ca4a731570e935bd026d16233c7918309d22708c2661ac3f8dfe5b5025dbce5ceb683f28104e9a9c6aca60c9a68bd5ad96df8a7f893b28f788dbf48bfcd93a684928298925ebe852c79c9ab493660d31c2fd5e4", 0xf3}, {&(0x7f0000003300)="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", 0xfe}, {&(0x7f0000003400)="38d610a66a346ebe292c27539a0c6acb076bb3877c9ab6e096bf54d3ea7a0e6142a643b171f3e056eaa161b38854b28d1dc50ffe42b50f6417824d0952c6a082a5bd287f3989e8663593d563abbdd8cacc5738316fd38349f5ad01288e2783", 0x5f}, {&(0x7f0000003480)="431e1ee0c4579a0ad82e4f7c610598825f715abbe6ccafce91332d8d83152f6c858fb5", 0x23}, {&(0x7f00000034c0)="30ab287f2aa4661a709bf6c0c2ca9926db43ff8e703b31440d1a6b2204d2b0c025be802754c44c59717ee4cd4fee66bcc4f82b1865dc60d38b5715de608cd0055d934dddf756bd3fcedf11d7c483d4a2ec23e8333120188d4bc3e13ad62026ef4789a2956caa535efce4b637bd5d7ff1b3a3a9230e5c574b1d1c89a87c19a7bea349742d244f60c4850a38446efcb7", 0x8f}], 0x9, &(0x7f0000003800)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x40, 0x20000011}}, {{&(0x7f0000003840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004c40)=[{&(0x7f00000038c0)="43461cf0dc186076312a13d79750ec414c6ce1c0a1373e37905bb0e622dd7a928894d6e70582b758d8272995c34ea0407388f8a7d10427873ec0e344adadfe21ab21d40ff688e5986031bbf44dbccc478b22caf17ceea3e6329c9b87feae08f29d840a95e7dbfb59e222e691ebbc69e32cbe4c11b67c8ca8dcaee8e110233e4f4779aa7da98e18dbdd262675", 0x8c}, {&(0x7f0000003980)="6572625da0d9f23e24115ed4fed6cdb0d6e45b7084a30b15d3a524598632bd5e12e84575ddf0152d274fff986d74f54a7a5bd50f3eb4200d9e13604312c5284a42a3c4906e034d0b959880de2307e393b4aa61b36cf5b5c894b3591c6128b64dcd967a98d7e621ef9027de601ea1ffe0adbf7cfc42ffeab0da96d6bf0810e1fcac08a44bb4733b8abb3217f6c3a6298419ced082102d26c6f4971febe0924a5da537efae46", 0xa5}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000004a40)="2d04a980c2cf54de07c6e672ce55ef525c7ec50edeea33b6184db245610219733fc64169aed05be9e51ecdbe553eb711d3497e6b0db8b00ae784d0efdc7ac48af77a7a732022988a9ac2b3a1a49ce2c02b795fd5034c2ada8d67fd6d207cf017c1baca7b536b59b4ab8e3b3fcde8883bf87ca581407ed42117cb4c537ff98edcbcae9cb88eba6d9f67c104d6c1a99e553a232090077679187ca284f4f3353eda44632aa6cf1d912577d161575b65bffd315bd749dedc445608e443299c20b99dfe7c5704047148635266d886fc", 0xcd}, {&(0x7f0000004b40)="842eeee502b53d0efef6cf53810db0128ed2c2b41b0c64ace26925c2fc79a5e5fba43cd16716f4951445fd6813e29a5797e30912c3641d8cd1e893aff2e9bba043152a9d9d5fd1fb2865638e75c7b2494901857c962b1b6119fc18248e983b7c9deb5552051fcc55b748ec7a8adcdd4e91f9d1869feb99dcf2996a96317e1ad1e30d1f0f5f84b1997b3c59a4f359278e11195f0c353d41eb27aa930ef8", 0x9d}, {&(0x7f0000004c00)="7e9de5140c7c424d54eb4e219943d6730b8c252c", 0x14}], 0x6, &(0x7f0000004f40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x448c0}}], 0x5, 0x808) 263.543517ms ago: executing program 2 (id=1037): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async, rerun: 64) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r7, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000000), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0xe}, 0x3, 0x44, 0x0, 0x0, 0x869, 0x6, 0x5, 0x3, 0xfffffff9, 0x0}) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, 0x0, 0x0) 227.1904ms ago: executing program 0 (id=1038): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800008000000000000000000008ccb5d8b03d72c31cf8db0f646b0000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000ac9500040933b92ed6a9050000"], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x40}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3e00d8f900", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800b0001006d616373656300000c0002800500030009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = socket$inet(0x2, 0x3, 0xd) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000cf00000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8690323c2086a24047f140e120239ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x2014) mkdirat(0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) setgroups(0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r9, 0x4018}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r9, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xc) write$vga_arbiter(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="8160c3b0fc8975656d00ebffa57faa3688214152a1f6c5c3d16053"], 0xe) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000006c0)=0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 180.150444ms ago: executing program 6 (id=1039): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe2(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r2}, 0x18) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x3000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) 171.262205ms ago: executing program 2 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) rseq(0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000200000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47f, &(0x7f00000004c0)="$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") 152.810516ms ago: executing program 2 (id=1041): r0 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 0s ago: executing program 6 (id=1042): r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=@newlink={0x380, 0x10, 0x20, 0x70bd2a, 0x10000, {0x0, 0x0, 0x4, 0x0, 0x10, 0x4004}, [@IFLA_VF_PORTS={0x22c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f755ac09b023b209dbc1b6c8c99cca32"}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ec4ca0a468e1bef61c59fcf9216b4e7a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x53}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "cd288bef097344b319369a5aa233f6f2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bac7382511c9ef513c2c0c0d65648d4b"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "161f1f3852ca2137c94a313d35a1f917"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cc15ce8d1f9728e06d780e949ba4deb5"}, @IFLA_PORT_PROFILE={0x7, 0x2, ',,\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xe5800000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a72d20663b164417ff3a4647ca9beba3"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0af58548c9b763388e8d8070704d6ea2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2fa0ce35be97448245d1c749baf9c433"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8be58e370223219a2d7ce032b3ea9577"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fd46c6f6326a5a851716dc412ec17bf4"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x1000}, @IFLA_PORT_PROFILE={0x8, 0x2, '%&%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "428f996ff3a0bd89e05c06821114e7d5"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "54f2fa77e6f65f25a236178dab4a2282"}, @IFLA_PORT_PROFILE={0xa, 0x2, 'team0\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dba2198d7a111f4fc643b9c668057118"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f0fca27dae03e202dbe79fb7970d2f01"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "24f33c248fafc8f21c3cfb60c4af8715"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x10}, @IFLA_PORT_VF={0x8, 0x1, 0xb25}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '.]-*:\'\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "43f4c45b6d086648c93a62acc01f0b94"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fc9ffb2d1db3561d719998aca6d09b25"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "76eb28853aaee059011a0afe74330ea7"}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}]}, @IFLA_VFINFO_LIST={0x118, 0x16, 0x0, 0x1, [{0x114, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @remote}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @broadcast}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x100, 0xa0}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x8b9, 0xf, 0x8100}}, {0x14, 0x1, {0x6, 0xd26, 0xa4, 0x8100}}, {0x14, 0x1, {0xfffffff8, 0x9b5, 0x4, 0x9a8}}, {0x14, 0x1, {0x1ff, 0xf9b, 0x44, 0x8100}}, {0x14, 0x1, {0x7, 0xe1b, 0x6, 0x88a8}}, {0x14, 0x1, {0x0, 0xdb6, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0x5d0, 0x6, 0x88a8}}, {0x14, 0x1, {0x5, 0x866, 0x6fe2}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x933, 0x4}}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x100}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x24a6}, @IFLA_IFALIASn={0x4}]}, 0x380}, 0x1, 0x0, 0x0, 0x44080}, 0x80084) r3 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') (rerun: 64) syz_read_part_table(0x4066, &(0x7f0000008100)="$eJzszzFKw3AUBvAvrcEogSLoJIjFwU3i5pRbdJeewclBxdzEUTyA9/AOjl4hDpJIrYNLQeX3m97Hx3vJP/wR1TgVSZ6XT3tJjufpmuaj3Br6nc+l5jzlbjVJneRq/ebicfP/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/FKTlXSbpHu5Ph1yNTbLw3Q3bS7qpDqYJffTlO1Rkf1kfvbN3WnymqRI8pZkMdvsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/+JyJW1/rethuFtffThJ15Zj2/d9/+PPVsk7u3MsAAAAgACMMskoY+jfCJa+VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBABgAAAECYv3Ue7QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//SIAVRg==") (async) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 64) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/time\x00') (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000008612050a00000c74412e45ae4df3e949d25da25d1574733d2b1a1cbad5df46de1051439dd72a60b093528388eef9463711a26c28e1433738722b5f2b60ffcfa39a183b063c716f5a78377b57745d2ab16b4db350f93dac879bca89c3196b6cdc0d1d1facf989d0c3ae9cc522f0013dff497c990efbf39c2b72ddfb142a4ca889273413", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r7}, 0x38) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='1\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0200000003000000000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r13 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) kernel console output (not intermixed with test programs): ] dump_user_range+0x61e/0x8f0 [ 52.283710][ T4501] elf_core_dump+0x1de7/0x1f80 [ 52.283777][ T4501] ? 0xffffffffff600000 [ 52.283801][ T4501] coredump_write+0xacf/0xdf0 [ 52.283827][ T4501] vfs_coredump+0x24f7/0x2e60 [ 52.283910][ T4501] ? __memcg_slab_free_hook+0xbc/0x230 [ 52.283937][ T4501] ? kmem_cache_free+0xe3/0x3a0 [ 52.284008][ T4501] ? proc_coredump_connector+0x114/0x220 [ 52.284034][ T4501] get_signal+0xd84/0xf70 [ 52.284068][ T4501] arch_do_signal_or_restart+0x96/0x450 [ 52.284098][ T4501] irqentry_exit+0xf9/0x560 [ 52.284135][ T4501] asm_exc_page_fault+0x26/0x30 [ 52.284200][ T4501] RIP: 0033:0x7f6865e6f751 [ 52.284212][ T4501] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 52.284254][ T4501] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 52.284271][ T4501] RAX: 0000000000000000 RBX: 00007f68660c5fa0 RCX: 00007f6865e6f749 [ 52.284284][ T4501] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000012000000 [ 52.284370][ T4501] RBP: 00007f6865ef3f91 R08: 0000000000000000 R09: 0000000000000000 [ 52.284383][ T4501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 52.284396][ T4501] R13: 00007f68660c6038 R14: 00007f68660c5fa0 R15: 00007ffd568988c8 [ 52.284416][ T4501] [ 52.284430][ T4501] memory: usage 307200kB, limit 307200kB, failcnt 25280 [ 52.433599][ T5073] netlink: 'syz.2.362': attribute type 13 has an invalid length. [ 52.437208][ T4501] memory+swap: usage 427820kB, limit 9007199254740988kB, failcnt 0 [ 52.437224][ T4501] kmem: usage 4312kB, limit 9007199254740988kB, failcnt 0 [ 52.437236][ T4501] Memory cgroup stats for /syz3: [ 52.554597][ T4501] cache 309813248 [ 52.563236][ T4501] rss 188416 [ 52.566427][ T4501] shmem 308957184 [ 52.570109][ T4501] mapped_file 188416 [ 52.574028][ T4501] dirty 0 [ 52.576978][ T4501] writeback 0 [ 52.580325][ T4501] workingset_refault_anon 15 [ 52.584900][ T4501] workingset_refault_file 608 [ 52.589564][ T4501] swap 127930368 [ 52.593141][ T4501] swapcached 65536 [ 52.596847][ T4501] pgpgin 141118 [ 52.600318][ T4501] pgpgout 65408 [ 52.603826][ T4501] pgfault 39440 [ 52.607270][ T4501] pgmajfault 16 [ 52.610747][ T4501] inactive_anon 227934208 [ 52.615071][ T4501] active_anon 81010688 [ 52.619140][ T4501] inactive_file 389120 [ 52.623292][ T4501] active_file 172032 [ 52.627170][ T4501] unevictable 0 [ 52.630648][ T4501] hierarchical_memory_limit 314572800 [ 52.636006][ T4501] hierarchical_memsw_limit 9223372036854771712 [ 52.642166][ T4501] total_cache 309813248 [ 52.646309][ T4501] total_rss 188416 [ 52.650038][ T4501] total_shmem 308957184 [ 52.654181][ T4501] total_mapped_file 188416 [ 52.658582][ T4501] total_dirty 0 [ 52.662108][ T4501] total_writeback 0 [ 52.665901][ T4501] total_workingset_refault_anon 15 [ 52.671137][ T4501] total_workingset_refault_file 608 [ 52.676321][ T4501] total_swap 127930368 [ 52.680546][ T4501] total_swapcached 65536 [ 52.684776][ T4501] total_pgpgin 141118 [ 52.688784][ T4501] total_pgpgout 65408 [ 52.692796][ T4501] total_pgfault 39440 [ 52.696788][ T4501] total_pgmajfault 16 [ 52.700778][ T4501] total_inactive_anon 227934208 [ 52.705670][ T4501] total_active_anon 81010688 [ 52.710264][ T4501] total_inactive_file 389120 [ 52.714839][ T4501] total_active_file 172032 [ 52.719269][ T4501] total_unevictable 0 [ 52.723271][ T4501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.225,pid=4460,uid=0 [ 52.737812][ T4501] Memory cgroup out of memory: Killed process 4460 (syz.3.225) total-vm:89996kB, anon-rss:1148kB, file-rss:53996kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 52.760264][ T29] kauditd_printk_skb: 1399 callbacks suppressed [ 52.760279][ T29] audit: type=1400 audit(1767867445.981:4080): avc: denied { getopt } for pid=5081 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.796470][ T5082] set_capacity_and_notify: 4 callbacks suppressed [ 52.796485][ T5082] loop5: detected capacity change from 0 to 512 [ 52.840408][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.847654][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.866346][ T5082] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.365: ea_inode file size=4 entry size=6 [ 52.922476][ T29] audit: type=1326 audit(1767867446.001:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 52.946004][ T29] audit: type=1326 audit(1767867446.001:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 52.969569][ T29] audit: type=1326 audit(1767867446.001:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 52.993080][ T29] audit: type=1326 audit(1767867446.001:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 53.000641][ T4493] syz.3.225 (4493) used greatest stack depth: 8456 bytes left [ 53.016521][ T29] audit: type=1326 audit(1767867446.001:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 53.029995][ T5082] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.365: corrupted inode contents [ 53.047109][ T29] audit: type=1326 audit(1767867446.001:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 53.082392][ T29] audit: type=1326 audit(1767867446.001:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 53.105901][ T29] audit: type=1326 audit(1767867446.001:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aaba2df90 code=0x7ffc0000 [ 53.129513][ T29] audit: type=1326 audit(1767867446.001:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5081 comm="syz.5.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 53.156029][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.167404][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.211916][ T3501] syz1: Port: 1 Link DOWN [ 53.217196][ T5082] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.365: mark_inode_dirty error [ 53.254707][ T5082] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.365: corrupted inode contents [ 53.324203][ T395] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.334249][ T395] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.334258][ T5082] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.365: mark_inode_dirty error [ 53.349950][ T5082] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.365: mark inode dirty (error -117) [ 53.373677][ T395] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.383110][ T395] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.418302][ T5082] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 53.458431][ T5082] EXT4-fs (loop5): 1 orphan inode deleted [ 53.532010][ T5107] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.672865][ T5119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=5119 comm=syz.1.374 [ 53.693480][ T5119] ALSA: seq fatal error: cannot create timer (-19) [ 53.799435][ T5132] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.799535][ T5132] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 53.830146][ T5135] loop2: detected capacity change from 0 to 1024 [ 53.895556][ T5134] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.378' sets config #-7 [ 54.380121][ T5148] cgroup: Need name or subsystem set [ 54.415781][ T5150] __nla_validate_parse: 1 callbacks suppressed [ 54.415798][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.382'. [ 54.462425][ T5151] loop3: detected capacity change from 0 to 2048 [ 54.528940][ T5150] loop5: detected capacity change from 0 to 1024 [ 54.583517][ T5150] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.611038][ T5151] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.380: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 54.642171][ T5150] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.382: Invalid block bitmap block 0 in block_group 0 [ 54.665599][ T5164] Falling back ldisc for ptm0. [ 54.699941][ T5150] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.382: Failed to acquire dquot type 0 [ 54.709716][ T5166] program syz.2.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.730788][ T5150] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.382: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.760726][ T5173] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5173 comm=syz.0.385 [ 54.773636][ T5150] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.382: Invalid inode bitmap blk 0 in block_group 0 [ 54.789941][ T5150] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 54.789970][ T1971] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 54.810107][ T5150] EXT4-fs (loop5): 1 orphan inode deleted [ 54.824597][ T5177] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 54.824659][ T5176] IPVS: stopping master sync thread 5177 ... [ 54.874427][ T5176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.386'. [ 54.883406][ T5176] tipc: Disabling bearer [ 55.090341][ T5191] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.484581][ T5201] lo speed is unknown, defaulting to 1000 [ 55.505814][ T5201] lo speed is unknown, defaulting to 1000 [ 55.525999][ T5201] lo speed is unknown, defaulting to 1000 [ 55.575607][ T5201] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.593360][ T5162] syz.3.380 invoked oom-killer: gfp_mask=0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 55.595431][ T5201] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 55.605453][ T5162] CPU: 1 UID: 0 PID: 5162 Comm: syz.3.380 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.605483][ T5162] Tainted: [W]=WARN [ 55.605489][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.605530][ T5162] Call Trace: [ 55.605537][ T5162] [ 55.605545][ T5162] __dump_stack+0x1d/0x30 [ 55.605571][ T5162] dump_stack_lvl+0x95/0xd0 [ 55.605643][ T5162] dump_stack+0x15/0x1b [ 55.605663][ T5162] dump_header+0x81/0x240 [ 55.605683][ T5162] oom_kill_process+0x295/0x350 [ 55.605706][ T5162] out_of_memory+0x97b/0xb80 [ 55.605803][ T5162] try_charge_memcg+0x610/0xa10 [ 55.605892][ T5162] obj_cgroup_charge_pages+0xa6/0x150 [ 55.605919][ T5162] obj_cgroup_charge_account+0x73/0x1a0 [ 55.605948][ T5162] __memcg_slab_post_alloc_hook+0x397/0x530 [ 55.605980][ T5162] __kmalloc_cache_noprof+0x2d0/0x4c0 [ 55.606008][ T5162] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 55.606041][ T5162] bpf_prog_alloc_no_stats+0xc4/0x390 [ 55.606149][ T5162] bpf_prog_alloc+0x3c/0x150 [ 55.606167][ T5162] bpf_prog_load+0x506/0x1140 [ 55.606195][ T5162] ? security_bpf+0x2b/0x90 [ 55.606221][ T5162] __sys_bpf+0x469/0x7c0 [ 55.606247][ T5162] __x64_sys_bpf+0x41/0x50 [ 55.606324][ T5162] x64_sys_call+0x28e1/0x3000 [ 55.606347][ T5162] do_syscall_64+0xca/0x2b0 [ 55.606434][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.606516][ T5162] RIP: 0033:0x7f6865e6f749 [ 55.606533][ T5162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.606549][ T5162] RSP: 002b:00007f68648ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.606570][ T5162] RAX: ffffffffffffffda RBX: 00007f68660c6090 RCX: 00007f6865e6f749 [ 55.606583][ T5162] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 55.606595][ T5162] RBP: 00007f6865ef3f91 R08: 0000000000000000 R09: 0000000000000000 [ 55.606607][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.606671][ T5162] R13: 00007f68660c6128 R14: 00007f68660c6090 R15: 00007ffd568988c8 [ 55.606699][ T5162] [ 55.606705][ T5162] memory: usage 307200kB, limit 307200kB, failcnt 27115 [ 55.829182][ T5162] memory+swap: usage 432096kB, limit 9007199254740988kB, failcnt 0 [ 55.837123][ T5162] kmem: usage 4228kB, limit 9007199254740988kB, failcnt 0 [ 55.844342][ T5162] Memory cgroup stats for /syz3: [ 55.845968][ T5201] lo speed is unknown, defaulting to 1000 [ 55.849220][ T5162] cache 309854208 [ 55.851590][ T5201] lo speed is unknown, defaulting to 1000 [ 55.856694][ T5162] rss 327680 [ 55.856703][ T5162] shmem 309837824 [ 55.872838][ T5162] mapped_file 0 [ 55.876296][ T5162] dirty 0 [ 55.879221][ T5162] writeback 20480 [ 55.882865][ T5162] workingset_refault_anon 54 [ 55.887444][ T5162] workingset_refault_file 2245 [ 55.892226][ T5162] swap 127893504 [ 55.895758][ T5162] swapcached 102400 [ 55.899615][ T5162] pgpgin 162486 [ 55.902804][ T5201] lo speed is unknown, defaulting to 1000 [ 55.903120][ T5162] pgpgout 86743 [ 55.912221][ T5162] pgfault 40778 [ 55.912995][ T5201] lo speed is unknown, defaulting to 1000 [ 55.915662][ T5162] pgmajfault 62 [ 55.915671][ T5162] inactive_anon 197259264 [ 55.929192][ T5162] active_anon 112173056 [ 55.930878][ T5201] lo speed is unknown, defaulting to 1000 [ 55.933369][ T5162] inactive_file 0 [ 55.942681][ T5162] active_file 24576 [ 55.943720][ T5201] lo speed is unknown, defaulting to 1000 [ 55.946476][ T5162] unevictable 0 [ 55.946485][ T5162] hierarchical_memory_limit 314572800 [ 55.946493][ T5162] hierarchical_memsw_limit 9223372036854771712 [ 55.946501][ T5162] total_cache 309854208 [ 55.946508][ T5162] total_rss 327680 [ 55.946514][ T5162] total_shmem 309837824 [ 55.946520][ T5162] total_mapped_file 0 [ 55.946527][ T5162] total_dirty 0 [ 55.946533][ T5162] total_writeback 20480 [ 55.946549][ T5162] total_workingset_refault_anon 54 [ 55.946557][ T5162] total_workingset_refault_file 2245 [ 55.965070][ T5201] lo speed is unknown, defaulting to 1000 [ 55.967647][ T5162] total_swap 127893504 [ 55.967656][ T5162] total_swapcached 102400 [ 55.967665][ T5162] total_pgpgin 162486 [ 56.019829][ T5162] total_pgpgout 86743 [ 56.023803][ T5162] total_pgfault 40778 [ 56.027850][ T5162] total_pgmajfault 62 [ 56.031867][ T5162] total_inactive_anon 197259264 [ 56.036701][ T5162] total_active_anon 112173056 [ 56.041437][ T5162] total_inactive_file 0 [ 56.045603][ T5162] total_active_file 24576 [ 56.049957][ T5162] total_unevictable 0 [ 56.053974][ T5162] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.225,pid=4467,uid=0 [ 56.068490][ T5162] Memory cgroup out of memory: Killed process 4467 (syz.3.225) total-vm:89996kB, anon-rss:1116kB, file-rss:54036kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 56.316986][ T5222] lo speed is unknown, defaulting to 1000 [ 56.629508][ T5234] loop1: detected capacity change from 0 to 512 [ 56.700208][ T5234] EXT4-fs (loop1): 1 orphan inode deleted [ 56.860937][ T5248] loop1: detected capacity change from 0 to 764 [ 56.870580][ T5250] loop5: detected capacity change from 0 to 1024 [ 56.894157][ T5248] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.958009][ T5248] Symlink component flag not implemented [ 56.990081][ T5248] Symlink component flag not implemented (7) [ 57.054806][ T5264] loop5: detected capacity change from 0 to 512 [ 57.085785][ T5264] EXT4-fs (loop5): 1 orphan inode deleted [ 57.120154][ T5248] lo speed is unknown, defaulting to 1000 [ 57.262992][ T5277] netlink: '+}[@': attribute type 21 has an invalid length. [ 57.290413][ T5274] xt_hashlimit: max too large, truncated to 1048576 [ 57.311269][ T5279] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 57.359934][ T5277] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 57.368478][ T5277] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 57.470986][ T5288] SET target dimension over the limit! [ 57.496154][ T5287] loop5: detected capacity change from 0 to 8192 [ 57.648503][ T5295] loop2: detected capacity change from 0 to 512 [ 57.663886][ T802] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.695657][ T5295] ext4: Unknown parameter 'dont_measure' [ 57.711444][ T802] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.762197][ T802] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.821879][ T802] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.865545][ T5297] lo speed is unknown, defaulting to 1000 [ 57.956753][ T5297] chnl_net:caif_netlink_parms(): no params data found [ 58.001783][ T4456] syz.3.225 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.011691][ T4456] CPU: 0 UID: 0 PID: 4456 Comm: syz.3.225 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.011721][ T4456] Tainted: [W]=WARN [ 58.011728][ T4456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.011740][ T4456] Call Trace: [ 58.011747][ T4456] [ 58.011755][ T4456] __dump_stack+0x1d/0x30 [ 58.011848][ T4456] dump_stack_lvl+0x95/0xd0 [ 58.011868][ T4456] dump_stack+0x15/0x1b [ 58.012032][ T4456] dump_header+0x81/0x240 [ 58.012052][ T4456] oom_kill_process+0x295/0x350 [ 58.012073][ T4456] out_of_memory+0x97b/0xb80 [ 58.012092][ T4456] try_charge_memcg+0x610/0xa10 [ 58.012172][ T4456] charge_memcg+0x51/0xc0 [ 58.012201][ T4456] __mem_cgroup_charge+0x28/0xb0 [ 58.012225][ T4456] shmem_get_folio_gfp+0x470/0xd50 [ 58.012306][ T4456] shmem_write_begin+0xfc/0x1f0 [ 58.012383][ T4456] generic_perform_write+0x184/0x490 [ 58.012459][ T4456] shmem_file_write_iter+0xc5/0xf0 [ 58.012539][ T4456] __kernel_write_iter+0x2d6/0x540 [ 58.012616][ T4456] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 58.012643][ T4456] dump_user_range+0x61e/0x8f0 [ 58.012667][ T4456] elf_core_dump+0x1de7/0x1f80 [ 58.012698][ T4456] ? 0xffffffffff600000 [ 58.012746][ T4456] coredump_write+0xacf/0xdf0 [ 58.012777][ T4456] vfs_coredump+0x24f7/0x2e60 [ 58.012852][ T4456] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 58.012879][ T4456] ? proc_coredump_connector+0x114/0x220 [ 58.012896][ T4456] ? _raw_spin_unlock_irq+0x14/0x50 [ 58.012935][ T4456] ? _raw_spin_unlock_irq+0x2f/0x50 [ 58.012957][ T4456] get_signal+0xd84/0xf70 [ 58.012989][ T4456] arch_do_signal_or_restart+0x96/0x450 [ 58.013029][ T4456] irqentry_exit+0xf9/0x560 [ 58.013058][ T4456] asm_exc_page_fault+0x26/0x30 [ 58.013115][ T4456] RIP: 0033:0x7f6865e6f751 [ 58.013128][ T4456] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.013158][ T4456] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 58.013174][ T4456] RAX: 0000000000000000 RBX: 00007f68660c5fa0 RCX: 00007f6865e6f749 [ 58.013186][ T4456] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000012000000 [ 58.013197][ T4456] RBP: 00007f6865ef3f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.013209][ T4456] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.013220][ T4456] R13: 00007f68660c6038 R14: 00007f68660c5fa0 R15: 00007ffd568988c8 [ 58.013236][ T4456] [ 58.013293][ T4456] memory: usage 307200kB, limit 307200kB, failcnt 28578 [ 58.260726][ T4456] memory+swap: usage 431816kB, limit 9007199254740988kB, failcnt 0 [ 58.268614][ T4456] kmem: usage 4172kB, limit 9007199254740988kB, failcnt 0 [ 58.275758][ T4456] Memory cgroup stats for /syz3: [ 58.336351][ T4467] syz.3.225 (4467) used greatest stack depth: 8272 bytes left [ 58.440105][ T4456] cache 309514240 [ 58.443847][ T4456] rss 352256 [ 58.447034][ T4456] shmem 309510144 [ 58.450705][ T4456] mapped_file 86016 [ 58.454500][ T4456] dirty 0 [ 58.457425][ T4456] writeback 303104 [ 58.461229][ T4456] workingset_refault_anon 54 [ 58.465808][ T4456] workingset_refault_file 4249 [ 58.470624][ T4456] swap 127623168 [ 58.474159][ T4456] swapcached 372736 [ 58.478123][ T4456] pgpgin 173723 [ 58.481603][ T4456] pgpgout 97990 [ 58.485271][ T4456] pgfault 41357 [ 58.488783][ T4456] pgmajfault 76 [ 58.492367][ T4456] inactive_anon 144306176 [ 58.496677][ T4456] active_anon 164569088 [ 58.500860][ T4456] inactive_file 12288 [ 58.504836][ T4456] active_file 0 [ 58.508273][ T4456] unevictable 0 [ 58.512409][ T4456] hierarchical_memory_limit 314572800 [ 58.517779][ T4456] hierarchical_memsw_limit 9223372036854771712 [ 58.524225][ T4456] total_cache 309514240 [ 58.528373][ T4456] total_rss 352256 [ 58.532134][ T4456] total_shmem 309510144 [ 58.536447][ T4456] total_mapped_file 86016 [ 58.540911][ T4456] total_dirty 0 [ 58.544467][ T4456] total_writeback 303104 [ 58.548699][ T4456] total_workingset_refault_anon 54 [ 58.553877][ T4456] total_workingset_refault_file 4249 [ 58.559153][ T4456] total_swap 127623168 [ 58.563228][ T4456] total_swapcached 372736 [ 58.567699][ T4456] total_pgpgin 173723 [ 58.571816][ T4456] total_pgpgout 97990 [ 58.575791][ T4456] total_pgfault 41357 [ 58.579829][ T4456] total_pgmajfault 76 [ 58.583802][ T4456] total_inactive_anon 144306176 [ 58.588640][ T4456] total_active_anon 164569088 [ 58.593381][ T4456] total_inactive_file 12288 [ 58.597872][ T4456] total_active_file 0 [ 58.601896][ T4456] total_unevictable 0 [ 58.603003][ T5320] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 58.603003][ T5320] program syz.2.428 not setting count and/or reply_len properly [ 58.605867][ T4456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.225,pid=4472,uid=0 [ 58.637021][ T4456] Memory cgroup out of memory: Killed process 4472 (syz.3.225) total-vm:89996kB, anon-rss:1148kB, file-rss:53968kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 58.664438][ T5320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.428'. [ 58.692483][ T802] tipc: Left network mode [ 58.696936][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.704045][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.722074][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 58.722088][ T29] audit: type=1400 audit(1767867451.941:4348): avc: denied { write } for pid=5329 comm="syz.0.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 58.762115][ T5333] loop2: detected capacity change from 0 to 1024 [ 58.782413][ T5297] bridge_slave_0: entered allmulticast mode [ 58.789310][ T5333] EXT4-fs: Ignoring removed orlov option [ 58.796215][ T5297] bridge_slave_0: entered promiscuous mode [ 58.806413][ T29] audit: type=1326 audit(1767867452.001:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.829915][ T29] audit: type=1326 audit(1767867452.011:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.853212][ T29] audit: type=1326 audit(1767867452.011:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.876521][ T29] audit: type=1326 audit(1767867452.011:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.877221][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.899831][ T29] audit: type=1326 audit(1767867452.011:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.906864][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.930252][ T29] audit: type=1326 audit(1767867452.011:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.930274][ T29] audit: type=1326 audit(1767867452.011:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.983984][ T29] audit: type=1326 audit(1767867452.011:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 58.991690][ T5297] bridge_slave_1: entered allmulticast mode [ 59.007354][ T29] audit: type=1326 audit(1767867452.011:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5334 comm="syz.0.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79d6f749 code=0x7ffc0000 [ 59.031092][ T5297] bridge_slave_1: entered promiscuous mode [ 59.184564][ T5297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.199567][ T5297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.233476][ T5297] team0: Port device team_slave_0 added [ 59.240276][ T5297] team0: Port device team_slave_1 added [ 59.257956][ T5297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.264950][ T5297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.290904][ T5297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.324116][ T5297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.331102][ T5297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.357038][ T5297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.418286][ T5335] lo speed is unknown, defaulting to 1000 [ 59.461951][ T802] hsr_slave_0: left promiscuous mode [ 59.479416][ T802] hsr_slave_1: left promiscuous mode [ 59.485299][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.492744][ T802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.500448][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.507815][ T802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.517751][ T802] veth1_macvtap: left promiscuous mode [ 59.523441][ T802] veth0_macvtap: left promiscuous mode [ 59.528941][ T802] veth1_vlan: left promiscuous mode [ 59.534270][ T802] veth0_vlan: left promiscuous mode [ 59.613904][ T802] pim6reg (unregistering): left allmulticast mode [ 59.645823][ T5307] loop3: detected capacity change from 0 to 2048 [ 59.669921][ T5360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5360 comm=syz.2.437 [ 59.782983][ T5297] hsr_slave_0: entered promiscuous mode [ 59.789175][ T5297] hsr_slave_1: entered promiscuous mode [ 59.899331][ T5297] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.909997][ T5297] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.919169][ T5297] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.952244][ T5297] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.004876][ T5297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.017243][ T5297] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.035103][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.042259][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.052061][ T5388] loop2: detected capacity change from 0 to 2048 [ 60.081109][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.088202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.201976][ T5297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.393523][ T5297] veth0_vlan: entered promiscuous mode [ 60.411770][ T5297] veth1_vlan: entered promiscuous mode [ 60.426794][ T5297] veth0_macvtap: entered promiscuous mode [ 60.449966][ T5297] veth1_macvtap: entered promiscuous mode [ 60.474470][ T5297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.496256][ T5297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.513623][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.522819][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.532382][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.542698][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.593057][ T5426] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.615144][ T5427] loop6: detected capacity change from 0 to 2048 [ 60.641176][ T5431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 60.650190][ T5431] netlink: 84 bytes leftover after parsing attributes in process `syz.0.449'. [ 60.664844][ T5431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 60.671645][ T5427] Alternate GPT is invalid, using primary GPT. [ 60.680174][ T5427] loop6: p1 p2 p3 [ 60.683891][ T5427] loop6: partition table partially beyond EOD, truncated [ 60.756115][ T5436] loop6: detected capacity change from 0 to 164 [ 61.121302][ T5462] sg_write: data in/out 1530911619/1 bytes for SCSI command 0x8e-- guessing data in; [ 61.121302][ T5462] program syz.6.459 not setting count and/or reply_len properly [ 61.181189][ T5462] loop6: detected capacity change from 0 to 512 [ 61.202447][ T5462] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 61.314555][ T5469] loop6: detected capacity change from 0 to 1024 [ 61.339028][ T5469] EXT4-fs: Ignoring removed bh option [ 61.350178][ T5478] netlink: 'syz.2.462': attribute type 30 has an invalid length. [ 61.358292][ T5479] netlink: 'syz.2.462': attribute type 30 has an invalid length. [ 61.367279][ T5469] EXT4-fs: Mount option(s) incompatible with ext2 [ 61.382308][ T5482] loop5: detected capacity change from 0 to 1024 [ 61.391921][ T5482] ext4: Unknown parameter 'fsuuid' [ 61.435777][ T4472] syz.3.225 (4472) used greatest stack depth: 7416 bytes left [ 61.569914][ T5495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.466'. [ 61.588926][ T5495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.466'. [ 61.597850][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.466'. [ 61.607534][ T5495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.466'. [ 61.633422][ T5495] netlink: 'syz.6.466': attribute type 5 has an invalid length. [ 61.641176][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.6.466'. [ 61.683127][ T5499] lo speed is unknown, defaulting to 1000 [ 61.688938][ T5499] lo speed is unknown, defaulting to 1000 [ 61.706604][ T5505] loop6: detected capacity change from 0 to 512 [ 61.734024][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 61.766730][ T5505] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 61.774878][ T5499] lo speed is unknown, defaulting to 1000 [ 61.809857][ T5505] EXT4-fs (loop6): orphan cleanup on readonly fs [ 61.834469][ T5499] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.839499][ T4479] syz.3.225 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 61.851516][ T4479] CPU: 1 UID: 0 PID: 4479 Comm: syz.3.225 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 61.851548][ T4479] Tainted: [W]=WARN [ 61.851553][ T4479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 61.851617][ T4479] Call Trace: [ 61.851622][ T4479] [ 61.851629][ T4479] __dump_stack+0x1d/0x30 [ 61.851651][ T4479] dump_stack_lvl+0x95/0xd0 [ 61.851671][ T4479] dump_stack+0x15/0x1b [ 61.851691][ T4479] dump_header+0x81/0x240 [ 61.851737][ T4479] oom_kill_process+0x295/0x350 [ 61.851761][ T4479] out_of_memory+0x97b/0xb80 [ 61.851784][ T4479] try_charge_memcg+0x610/0xa10 [ 61.851815][ T4479] charge_memcg+0x51/0xc0 [ 61.851907][ T4479] __mem_cgroup_charge+0x28/0xb0 [ 61.851979][ T4479] shmem_get_folio_gfp+0x470/0xd50 [ 61.852036][ T4479] shmem_write_begin+0xfc/0x1f0 [ 61.852058][ T4479] generic_perform_write+0x184/0x490 [ 61.852088][ T4479] shmem_file_write_iter+0xc5/0xf0 [ 61.852155][ T4479] __kernel_write_iter+0x2d6/0x540 [ 61.852170][ T4479] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 61.852253][ T4479] dump_user_range+0x61e/0x8f0 [ 61.852359][ T4479] elf_core_dump+0x1de7/0x1f80 [ 61.852426][ T4479] ? 0xffffffffff600000 [ 61.852453][ T4479] coredump_write+0xacf/0xdf0 [ 61.852479][ T4479] vfs_coredump+0x24f7/0x2e60 [ 61.852505][ T4479] ? __memcg_slab_free_hook+0xbc/0x230 [ 61.852572][ T4479] ? kmem_cache_free+0xe3/0x3a0 [ 61.852590][ T4479] ? proc_coredump_connector+0x114/0x220 [ 61.852609][ T4479] get_signal+0xd84/0xf70 [ 61.852706][ T4479] arch_do_signal_or_restart+0x96/0x450 [ 61.852730][ T4479] irqentry_exit+0xf9/0x560 [ 61.852802][ T4479] asm_exc_page_fault+0x26/0x30 [ 61.852821][ T4479] RIP: 0033:0x7f6865e6f751 [ 61.852834][ T4479] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.852901][ T4479] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 61.852915][ T4479] RAX: 0000000000000000 RBX: 00007f68660c5fa0 RCX: 00007f6865e6f749 [ 61.852925][ T4479] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000012000000 [ 61.852936][ T4479] RBP: 00007f6865ef3f91 R08: 0000000000000000 R09: 0000000000000000 [ 61.852949][ T4479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.852961][ T4479] R13: 00007f68660c6038 R14: 00007f68660c5fa0 R15: 00007ffd568988c8 [ 61.852980][ T4479] [ 61.852987][ T4479] memory: usage 307200kB, limit 307200kB, failcnt 30180 [ 61.882342][ T5505] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.470: corrupted inode contents [ 61.884448][ T4479] memory+swap: usage 431608kB, limit 9007199254740988kB, failcnt 0 [ 61.891489][ T5505] EXT4-fs (loop6): Remounting filesystem read-only [ 61.893335][ T4479] kmem: usage 3636kB, limit 9007199254740988kB, failcnt 0 [ 61.909859][ T5505] EXT4-fs (loop6): 1 truncate cleaned up [ 61.911159][ T4479] Memory cgroup stats for [ 61.916020][ T4112] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.920360][ T4479] /syz3 [ 61.925193][ T4112] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 61.925218][ T4112] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 61.930349][ T4479] : [ 62.087542][ T5516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.106786][ T5499] lo speed is unknown, defaulting to 1000 [ 62.190629][ T5499] lo speed is unknown, defaulting to 1000 [ 62.197309][ T5499] lo speed is unknown, defaulting to 1000 [ 62.197372][ T5518] netlink: 96 bytes leftover after parsing attributes in process `syz.0.473'. [ 62.221612][ T5499] lo speed is unknown, defaulting to 1000 [ 62.232913][ T4479] cache 310145024 [ 62.236572][ T4479] rss 110592 [ 62.239868][ T4479] shmem 310059008 [ 62.243496][ T4479] mapped_file 4096 [ 62.247214][ T4479] dirty 0 [ 62.250231][ T4479] writeback 483328 [ 62.253935][ T4479] workingset_refault_anon 54 [ 62.258567][ T4479] workingset_refault_file 4396 [ 62.263410][ T4479] swap 127393792 [ 62.266946][ T4479] swapcached 602112 [ 62.270915][ T4479] pgpgin 183483 [ 62.274442][ T4479] pgpgout 107592 [ 62.278013][ T4479] pgfault 41615 [ 62.281506][ T4479] pgmajfault 85 [ 62.284962][ T4479] inactive_anon 92815360 [ 62.289263][ T4479] active_anon 217677824 [ 62.290933][ T5499] lo speed is unknown, defaulting to 1000 [ 62.293496][ T4479] inactive_file 57344 [ 62.303167][ T4479] active_file 32768 [ 62.306965][ T4479] unevictable 0 [ 62.310431][ T4479] hierarchical_memory_limit 314572800 [ 62.315791][ T4479] hierarchical_memsw_limit 9223372036854771712 [ 62.321988][ T4479] total_cache 310145024 [ 62.326148][ T4479] total_rss 110592 [ 62.329926][ T4479] total_shmem 310059008 [ 62.334107][ T4479] total_mapped_file 4096 [ 62.338334][ T4479] total_dirty 0 [ 62.338717][ T5499] lo speed is unknown, defaulting to 1000 [ 62.341821][ T4479] total_writeback 483328 [ 62.341830][ T4479] total_workingset_refault_anon 54 [ 62.341838][ T4479] total_workingset_refault_file 4396 [ 62.362184][ T4479] total_swap 127393792 [ 62.366230][ T4479] total_swapcached 602112 [ 62.370223][ T5499] lo speed is unknown, defaulting to 1000 [ 62.370587][ T4479] total_pgpgin 183483 [ 62.380217][ T4479] total_pgpgout 107592 [ 62.384268][ T4479] total_pgfault 41615 [ 62.388236][ T4479] total_pgmajfault 85 [ 62.392285][ T4479] total_inactive_anon 92815360 [ 62.397076][ T4479] total_active_anon 217677824 [ 62.401769][ T4479] total_inactive_file 57344 [ 62.406256][ T4479] total_active_file 32768 [ 62.410608][ T4479] total_unevictable 0 [ 62.414577][ T4479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.225,pid=4514,uid=0 [ 62.429241][ T4479] Memory cgroup out of memory: Killed process 4514 (syz.3.225) total-vm:90260kB, anon-rss:1168kB, file-rss:48304kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 62.625334][ T5543] loop2: detected capacity change from 0 to 256 [ 62.655334][ T5543] FAT-fs (loop2): Directory bread(block 64) failed [ 62.663343][ T5543] FAT-fs (loop2): Directory bread(block 65) failed [ 62.671824][ T5543] FAT-fs (loop2): Directory bread(block 66) failed [ 62.678348][ T5543] FAT-fs (loop2): Directory bread(block 67) failed [ 62.724179][ T5543] FAT-fs (loop2): Directory bread(block 68) failed [ 62.877072][ T5543] FAT-fs (loop2): Directory bread(block 69) failed [ 62.962117][ T5543] FAT-fs (loop2): Directory bread(block 70) failed [ 63.018778][ T5543] FAT-fs (loop2): Directory bread(block 71) failed [ 63.080607][ T5551] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.092264][ T5543] FAT-fs (loop2): Directory bread(block 72) failed [ 63.108625][ T5543] FAT-fs (loop2): Directory bread(block 73) failed [ 63.147526][ T5551] EXT4-fs (loop5): 1 truncate cleaned up [ 63.162391][ T5543] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.346430][ T5559] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 63.684343][ T5575] lo speed is unknown, defaulting to 1000 [ 63.716895][ T5574] batadv_slave_0: entered promiscuous mode [ 63.799927][ T29] kauditd_printk_skb: 842 callbacks suppressed [ 63.799952][ T29] audit: type=1326 audit(1767867457.021:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 63.872442][ T5581] set_capacity_and_notify: 2 callbacks suppressed [ 63.872458][ T5581] loop6: detected capacity change from 0 to 256 [ 63.887947][ T29] audit: type=1326 audit(1767867457.021:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 63.911496][ T29] audit: type=1326 audit(1767867457.021:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 63.934926][ T29] audit: type=1326 audit(1767867457.051:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 63.958446][ T29] audit: type=1326 audit(1767867457.071:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aaba2df90 code=0x7ffc0000 [ 63.981912][ T29] audit: type=1326 audit(1767867457.071:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1aaba2f34b code=0x7ffc0000 [ 64.005293][ T29] audit: type=1326 audit(1767867457.071:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1aaba2e3aa code=0x7ffc0000 [ 64.028416][ T29] audit: type=1326 audit(1767867457.071:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 64.051754][ T29] audit: type=1326 audit(1767867457.071:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 64.134755][ T29] audit: type=1326 audit(1767867457.121:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.5.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 64.163675][ T5583] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 64.519480][ T5604] loop2: detected capacity change from 0 to 1024 [ 64.690625][ T5621] loop2: detected capacity change from 0 to 1024 [ 64.697736][ T5621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.720478][ T5621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 64.737830][ T5621] System zones: 0-1, 3-36 [ 64.781084][ T5627] netlink: 'syz.2.504': attribute type 11 has an invalid length. [ 64.831500][ T5632] loop2: detected capacity change from 0 to 512 [ 64.841114][ T5632] EXT4-fs (loop2): failed to initialize system zone (-117) [ 64.855779][ T5634] 9p: Bad value for 'wfdno' [ 64.889803][ T5632] EXT4-fs (loop2): mount failed [ 64.961609][ T1039] hid_parser_main: 8 callbacks suppressed [ 64.961627][ T1039] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 64.975036][ T1039] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 64.996695][ T5636] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 65.030544][ T1039] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 65.059222][ T1039] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 65.077200][ T5642] 9p: Bad value for 'rfdno' [ 65.119916][ T5645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5645 comm=syz.2.510 [ 65.132375][ T5645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5645 comm=syz.2.510 [ 65.222573][ T5645] loop2: detected capacity change from 0 to 1024 [ 65.253850][ T5645] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 65.292002][ T5645] EXT4-fs mount: 30 callbacks suppressed [ 65.292017][ T5645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.321373][ T5645] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.510: missing EA_INODE flag [ 65.333063][ T5645] EXT4-fs (loop2): Remounting filesystem read-only [ 65.356907][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.460115][ T4459] syz.3.225 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 65.470018][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.3.225 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.470050][ T4459] Tainted: [W]=WARN [ 65.470057][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.470068][ T4459] Call Trace: [ 65.470073][ T4459] [ 65.470081][ T4459] __dump_stack+0x1d/0x30 [ 65.470127][ T4459] dump_stack_lvl+0x95/0xd0 [ 65.470149][ T4459] dump_stack+0x15/0x1b [ 65.470168][ T4459] dump_header+0x81/0x240 [ 65.470190][ T4459] oom_kill_process+0x295/0x350 [ 65.470273][ T4459] out_of_memory+0x97b/0xb80 [ 65.470296][ T4459] try_charge_memcg+0x610/0xa10 [ 65.470331][ T4459] charge_memcg+0x51/0xc0 [ 65.470498][ T4459] __mem_cgroup_charge+0x28/0xb0 [ 65.470527][ T4459] shmem_get_folio_gfp+0x470/0xd50 [ 65.470557][ T4459] shmem_write_begin+0xfc/0x1f0 [ 65.470578][ T4459] generic_perform_write+0x184/0x490 [ 65.470686][ T4459] shmem_file_write_iter+0xc5/0xf0 [ 65.470715][ T4459] __kernel_write_iter+0x2d6/0x540 [ 65.470732][ T4459] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 65.470785][ T4459] dump_user_range+0x61e/0x8f0 [ 65.470879][ T4459] elf_core_dump+0x1de7/0x1f80 [ 65.470923][ T4459] ? 0xffffffffff600000 [ 65.470951][ T4459] coredump_write+0xacf/0xdf0 [ 65.470983][ T4459] vfs_coredump+0x24f7/0x2e60 [ 65.471011][ T4459] ? __memcg_slab_free_hook+0xbc/0x230 [ 65.471063][ T4459] ? kmem_cache_free+0xe3/0x3a0 [ 65.471082][ T4459] ? proc_coredump_connector+0x114/0x220 [ 65.471193][ T4459] get_signal+0xd84/0xf70 [ 65.471223][ T4459] arch_do_signal_or_restart+0x96/0x450 [ 65.471294][ T4459] irqentry_exit+0xf9/0x560 [ 65.471319][ T4459] asm_exc_page_fault+0x26/0x30 [ 65.471339][ T4459] RIP: 0033:0x7f6865e6f751 [ 65.471354][ T4459] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 65.471433][ T4459] RSP: 002b:0000000000000010 EFLAGS: 00010217 [ 65.471451][ T4459] RAX: 0000000000000000 RBX: 00007f68660c5fa0 RCX: 00007f6865e6f749 [ 65.471532][ T4459] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000012000000 [ 65.471545][ T4459] RBP: 00007f6865ef3f91 R08: 0000000000000000 R09: 0000000000000000 [ 65.471558][ T4459] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.471571][ T4459] R13: 00007f68660c6038 R14: 00007f68660c5fa0 R15: 00007ffd568988c8 [ 65.471591][ T4459] [ 65.471598][ T4459] memory: usage 307180kB, limit 307200kB, failcnt 31500 [ 65.555153][ T5655] loop5: detected capacity change from 0 to 1024 [ 65.559593][ T4459] memory+swap: usage 430140kB, limit 9007199254740988kB, failcnt 0 [ 65.559608][ T4459] kmem: usage 3520kB, limit 9007199254740988kB, failcnt 0 [ 65.559620][ T4459] Memory cgroup stats for /syz3: [ 65.561867][ T4459] cache 308510720 [ 65.603613][ T5655] EXT4-fs: Ignoring removed bh option [ 65.604245][ T4459] rss 135168 [ 65.753546][ T4459] shmem 308346880 [ 65.757173][ T4459] mapped_file 6533120 [ 65.761205][ T4459] dirty 0 [ 65.764138][ T4459] writeback 1568768 [ 65.767931][ T4459] workingset_refault_anon 93 [ 65.772533][ T4459] workingset_refault_file 5464 [ 65.777665][ T4459] swap 126259200 [ 65.781279][ T4459] swapcached 1736704 [ 65.785221][ T4459] pgpgin 193307 [ 65.788666][ T4459] pgpgout 117528 [ 65.792370][ T4459] pgfault 43362 [ 65.795825][ T4459] pgmajfault 105 [ 65.799466][ T4459] inactive_anon 124493824 [ 65.803833][ T4459] active_anon 185462784 [ 65.807982][ T4459] inactive_file 110592 [ 65.812122][ T4459] active_file 0 [ 65.815566][ T4459] unevictable 0 [ 65.819013][ T4459] hierarchical_memory_limit 314572800 [ 65.824399][ T4459] hierarchical_memsw_limit 9223372036854771712 [ 65.830558][ T4459] total_cache 308510720 [ 65.834700][ T4459] total_rss 135168 [ 65.838440][ T4459] total_shmem 308346880 [ 65.842606][ T4459] total_mapped_file 6533120 [ 65.847087][ T4459] total_dirty 0 [ 65.850555][ T4459] total_writeback 1568768 [ 65.854872][ T4459] total_workingset_refault_anon 93 [ 65.860021][ T4459] total_workingset_refault_file 5464 [ 65.865295][ T4459] total_swap 126259200 [ 65.869349][ T4459] total_swapcached 1736704 [ 65.873791][ T4459] total_pgpgin 193307 [ 65.877759][ T4459] total_pgpgout 117528 [ 65.881855][ T4459] total_pgfault 43362 [ 65.885826][ T4459] total_pgmajfault 105 [ 65.889960][ T4459] total_inactive_anon 124493824 [ 65.894804][ T4459] total_active_anon 185462784 [ 65.899509][ T4459] total_inactive_file 110592 [ 65.904120][ T4459] total_active_file 0 [ 65.908097][ T4459] total_unevictable 0 [ 65.912077][ T4459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.225,pid=4506,uid=0 [ 65.926579][ T4459] Memory cgroup out of memory: Killed process 4506 (syz.3.225) total-vm:90260kB, anon-rss:1168kB, file-rss:48372kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 66.036113][ T5655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.080658][ T5670] loop6: detected capacity change from 0 to 512 [ 66.097124][ T5670] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 66.111003][ T5670] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 66.143762][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.329747][ T5670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.338229][ T5670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.045387][ T5699] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.081689][ T5701] loop2: detected capacity change from 0 to 1024 [ 67.097903][ T5701] EXT4-fs: inline encryption not supported [ 67.141118][ T5701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.151912][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.164455][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.177608][ T5702] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 67.189695][ T5707] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 67.192310][ T5702] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 67.251185][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.284684][ T5699] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.338621][ T5711] loop5: detected capacity change from 0 to 512 [ 67.353205][ T5699] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.368456][ T5711] EXT4-fs (loop5): 1 orphan inode deleted [ 67.375124][ T5711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.470540][ T5714] lo speed is unknown, defaulting to 1000 [ 67.493835][ T5699] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.522102][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.617905][ T4112] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.692781][ T4112] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.701686][ T5731] IPVS: stopping master sync thread 5426 ... [ 67.733689][ T4112] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.769844][ T4112] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.806311][ T5736] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 67.814177][ T5736] __nla_validate_parse: 6 callbacks suppressed [ 67.814193][ T5736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.536'. [ 67.845769][ T4459] syz.3.225 (4459) used greatest stack depth: 7208 bytes left [ 67.850108][ T5736] dummy0: entered promiscuous mode [ 67.860921][ T5736] bridge0: port 3(dummy0) entered blocking state [ 67.863042][ T5743] loop6: detected capacity change from 0 to 128 [ 67.867331][ T5736] bridge0: port 3(dummy0) entered disabled state [ 67.909044][ T5746] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 68.030098][ T5736] dummy0: entered allmulticast mode [ 68.194592][ T3497] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 68.204093][ T5753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 68.213028][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.540'. [ 68.225901][ T3497] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.272502][ T5755] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.539: EA inode hash validation failed [ 68.361194][ T5755] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.539: corrupted inode contents [ 68.440952][ T5755] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.539: mark_inode_dirty error [ 68.544386][ T5755] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.539: corrupted inode contents [ 68.565096][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 68.576848][ T5748] lo speed is unknown, defaulting to 1000 [ 68.621271][ T5755] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.539: mark_inode_dirty error [ 68.633682][ T5755] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.539: mark inode dirty (error -117) [ 68.646648][ T5755] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 68.659862][ T5755] EXT4-fs (loop2): 1 orphan inode deleted [ 68.670535][ T5755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.715246][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.735778][ T5781] Set syz1 is full, maxelem 65536 reached [ 68.771991][ T5785] EXT4-fs: Ignoring removed oldalloc option [ 68.872661][ T5785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.881177][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'. [ 68.896911][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.551'. [ 68.919998][ T5785] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.930727][ T5791] netlink: 'syz.5.551': attribute type 2 has an invalid length. [ 68.938355][ T5791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.551'. [ 68.973806][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 68.973821][ T29] audit: type=1326 audit(1767867462.191:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2016bdf90 code=0x7ffc0000 [ 69.021578][ T5784] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.038287][ T5791] SELinux: failed to load policy [ 69.050015][ T5785] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.548: bg 0: block 112: padding at end of block bitmap is not set [ 69.053660][ T29] audit: type=1326 audit(1767867462.221:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc2016be497 code=0x7ffc0000 [ 69.087530][ T29] audit: type=1326 audit(1767867462.221:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2016bdf90 code=0x7ffc0000 [ 69.110943][ T29] audit: type=1326 audit(1767867462.221:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2016bf749 code=0x7ffc0000 [ 69.134259][ T29] audit: type=1326 audit(1767867462.231:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2016bdf90 code=0x7ffc0000 [ 69.157591][ T29] audit: type=1326 audit(1767867462.231:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2016bf749 code=0x7ffc0000 [ 69.180972][ T29] audit: type=1326 audit(1767867462.231:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2016bf749 code=0x7ffc0000 [ 69.204409][ T29] audit: type=1326 audit(1767867462.231:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc2016bf749 code=0x7ffc0000 [ 69.227634][ T29] audit: type=1326 audit(1767867462.231:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2016bf749 code=0x7ffc0000 [ 69.250933][ T29] audit: type=1326 audit(1767867462.231:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5783 comm="syz.2.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2016bf749 code=0x7ffc0000 [ 69.277168][ T5785] EXT4-fs (loop2): Remounting filesystem read-only [ 69.347034][ T5784] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.353209][ T5801] set_capacity_and_notify: 2 callbacks suppressed [ 69.353225][ T5801] loop5: detected capacity change from 0 to 2048 [ 69.370720][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.400455][ T5801] loop5: p1 < > p3 p4 [ 69.405598][ T5801] loop5: p3 start 458752 is beyond EOD, truncated [ 69.412128][ T5801] loop5: p4 start 268435456 is beyond EOD, truncated [ 69.426740][ T5784] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.486514][ T5784] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.529348][ T5816] loop5: detected capacity change from 0 to 1024 [ 69.536220][ T5816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.543282][ T5816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.563321][ T5816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.580226][ T4111] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.600255][ T4111] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.633171][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.661806][ T4111] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.670926][ T5828] loop5: detected capacity change from 0 to 128 [ 69.683317][ T4111] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.754451][ T5835] loop5: detected capacity change from 0 to 512 [ 69.765210][ T5835] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.775108][ T5835] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 69.890359][ T5847] random: crng reseeded on system resumption [ 69.903814][ T5861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=5861 comm=syz.3.568 [ 69.916240][ T5861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5861 comm=syz.3.568 [ 69.920767][ T5860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.570'. [ 70.161114][ T5881] loop2: detected capacity change from 0 to 1024 [ 70.167754][ T5860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.570'. [ 70.236820][ T5881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.347918][ T5881] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.396927][ T5892] netlink: 'syz.0.576': attribute type 29 has an invalid length. [ 70.406347][ T5895] loop6: detected capacity change from 0 to 512 [ 70.417023][ T5881] rdma_rxe: rxe_newlink: failed to add lo [ 70.423195][ T5895] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 70.448401][ T5902] IPv6: Can't replace route, no match found [ 70.455986][ T5895] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 70.467004][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.497132][ T5910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=5910 comm=syz.6.583 [ 70.543237][ T5915] bridge0: entered promiscuous mode [ 70.575040][ T5898] bridge0: left promiscuous mode [ 70.588247][ T5914] loop6: detected capacity change from 0 to 8192 [ 70.686798][ T5929] loop3: detected capacity change from 0 to 1024 [ 70.700131][ T5929] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.711066][ T5929] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.751145][ T5929] JBD2: no valid journal superblock found [ 70.756893][ T5929] EXT4-fs (loop3): Could not load journal inode [ 70.868637][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.876975][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.905670][ T5950] bridge0: entered allmulticast mode [ 70.930984][ T5942] lo speed is unknown, defaulting to 1000 [ 70.936130][ T5966] bridge_slave_1: left allmulticast mode [ 70.942565][ T5966] bridge_slave_1: left promiscuous mode [ 70.948481][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.960533][ T5966] bridge_slave_0: left promiscuous mode [ 70.966218][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.127978][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.5.597'. [ 71.146198][ T5976] loop5: detected capacity change from 0 to 512 [ 71.161525][ T5976] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 71.169635][ T5976] System zones: 0-2, 18-18, 34-34 [ 71.179834][ T5976] EXT4-fs (loop5): too many log groups per flexible block group [ 71.186053][ T5946] lo speed is unknown, defaulting to 1000 [ 71.187720][ T5976] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 71.258914][ T5980] bridge1: entered allmulticast mode [ 71.291720][ T5980] bridge2: entered allmulticast mode [ 71.306995][ T5976] EXT4-fs (loop5): mount failed [ 71.328127][ T5987] loop2: detected capacity change from 0 to 256 [ 71.358528][ T5989] ext4: Unknown parameter 'obj_user' [ 71.410199][ T5987] unsupported nla_type 52263 [ 71.470097][ T6006] EXT4-fs (loop6): 1 orphan inode deleted [ 71.486416][ T5997] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 71.501175][ T6005] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 71.514542][ T6006] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.534984][ T6005] bond1 (unregistering): Released all slaves [ 71.561915][ T6010] usb usb9: usbfs: process 6010 (syz.5.609) did not claim interface 0 before use [ 71.574261][ T5297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.661310][ T6019] EXT4-fs (loop3): failed to initialize system zone (-117) [ 71.668547][ T6019] EXT4-fs (loop3): mount failed [ 71.681913][ T6023] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.713016][ T6023] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.923332][ T3743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.965751][ T6037] loop6: p1 p3 [ 71.971846][ T6037] loop6: p3 start 8388352 is beyond EOD, truncated [ 71.979500][ T6091] EXT4-fs (loop3): 1 orphan inode deleted [ 71.986832][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.012352][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.019854][ T6093] EXT4-fs (loop5): 1 orphan inode deleted [ 72.027562][ T6093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.058365][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.091004][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.103694][ T6102] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.128245][ T6113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.142757][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.177979][ T6122] can0: slcan on ttyS3. [ 72.220301][ T6122] can0 (unregistered): slcan off ttyS3. [ 72.245893][ T6131] sctp: [Deprecated]: syz.5.632 (pid 6131) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.245893][ T6131] Use struct sctp_sack_info instead [ 72.285908][ T6136] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 72.309204][ T6139] random: crng reseeded on system resumption [ 72.395087][ T6149] bridge0: port 3(veth0_vlan) entered blocking state [ 72.401928][ T6149] bridge0: port 3(veth0_vlan) entered disabled state [ 72.408834][ T6149] veth0_vlan: entered allmulticast mode [ 72.415635][ T6149] veth0_vlan: left allmulticast mode [ 72.422265][ T6149] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 72.567923][ T6154] rdma_rxe: rxe_newlink: failed to add bond0 [ 72.752424][ T6161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.765376][ T6161] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.884222][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.979500][ T6171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.991082][ T6171] EXT4-fs (loop2): 1 truncate cleaned up [ 72.997227][ T6171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.158946][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.271931][ T6183] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.284601][ T6183] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.347376][ T6192] syz_tun: entered allmulticast mode [ 73.366730][ T5297] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.414933][ T6197] Process accounting resumed [ 73.635623][ T6223] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.644136][ T6223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.673971][ T6223] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00cc02c, mo2=0102] [ 73.682921][ T6223] System zones: 0-1, 3-36 [ 73.695268][ T6223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.819670][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.901179][ T6250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.952219][ T6250] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.986506][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 73.986523][ T29] audit: type=1400 audit(1767867467.201:6360): avc: denied { accept } for pid=6257 comm="syz.2.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.013043][ T6250] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 74.023514][ T6250] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 74.032955][ T6250] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.667: Failed to acquire dquot type 0 [ 74.069296][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.173791][ T6265] EXT4-fs (loop2): 1 orphan inode deleted [ 74.188124][ T6265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.218576][ T6267] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 74.228423][ T6267] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.236302][ T6267] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.675: corrupted inode contents [ 74.248294][ T6267] EXT4-fs (loop5): Remounting filesystem read-only [ 74.255054][ T6267] EXT4-fs (loop5): 1 truncate cleaned up [ 74.255335][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.271330][ T31] Quota error (device loop5): write_blk: dquota write failed [ 74.278888][ T31] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 74.288982][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 74.299620][ T31] Quota error (device loop5): write_blk: dquota write failed [ 74.306987][ T31] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 74.316872][ T31] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 74.326996][ T31] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 74.335946][ T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 74.346134][ T6194] syz_tun: left allmulticast mode [ 74.346256][ T6267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.352019][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.380105][ T6276] set_capacity_and_notify: 16 callbacks suppressed [ 74.380115][ T6276] loop2: detected capacity change from 0 to 128 [ 74.393415][ T6276] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.405431][ T6276] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 74.413602][ T6276] FAT-fs (loop2): Filesystem has been set read-only [ 74.421183][ T29] audit: type=1400 audit(1767867467.641:6361): avc: denied { unmount } for pid=6275 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.441613][ T6276] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 74.540461][ T6289] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 74.564821][ T6291] loop6: detected capacity change from 0 to 256 [ 74.572031][ T6291] vfat: Unknown parameter 'utf8E0' [ 74.687354][ T6308] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 74.696851][ T6308] netlink: 'syz.2.686': attribute type 3 has an invalid length. [ 75.020162][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.075851][ T6355] __nla_validate_parse: 18 callbacks suppressed [ 75.075866][ T6355] netlink: 168 bytes leftover after parsing attributes in process `syz.5.698'. [ 75.141129][ T6361] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 75.165898][ T6363] xt_hashlimit: max too large, truncated to 1048576 [ 75.175460][ T6363] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.207558][ T6367] loop6: detected capacity change from 0 to 512 [ 75.219904][ T6367] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 75.260046][ T6367] EXT4-fs (loop6): 1 truncate cleaned up [ 75.277776][ T6367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.371346][ T6367] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.704: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 75.459651][ T6367] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.704: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 75.493739][ T6367] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 75.520372][ T5297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.571844][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.6.705'. [ 75.838788][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.849689][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.893958][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.712'. [ 75.904871][ T6402] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.962689][ T6402] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.021985][ T6402] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.062301][ T6402] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.136479][ T6046] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.161541][ T6046] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.194922][ T6046] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.204014][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.721'. [ 76.219815][ T6046] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.428793][ T6444] lo speed is unknown, defaulting to 1000 [ 76.576737][ T6455] lo speed is unknown, defaulting to 1000 [ 77.408083][ T6482] lo speed is unknown, defaulting to 1000 [ 77.605463][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 77.705416][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 77.707040][ T6509] lo speed is unknown, defaulting to 1000 [ 77.781541][ T6512] siw: device registration error -23 [ 77.787434][ T6512] smc: removing ib device syz1 [ 77.938288][ T6496] Set syz1 is full, maxelem 65536 reached [ 78.046662][ T6519] loop6: detected capacity change from 0 to 128 [ 78.048999][ T6517] netlink: 'syz.3.742': attribute type 10 has an invalid length. [ 78.063438][ T6517] team0: Failed to send options change via netlink (err -105) [ 78.070942][ T6517] team0: Port device dummy0 added [ 78.078520][ T6515] veth0: entered promiscuous mode [ 78.088566][ T6515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=6515 comm=syz.0.740 [ 78.101007][ T6515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6515 comm=syz.0.740 [ 78.120120][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 78.147481][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.744'. [ 78.166411][ T6527] team0: Port device team_slave_1 removed [ 78.233793][ T6539] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 78.240324][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.247956][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 78.256218][ T6542] vhci_hcd: connection closed [ 78.256608][ T6073] vhci_hcd vhci_hcd.0: stop threads [ 78.266531][ T6073] vhci_hcd vhci_hcd.0: release socket [ 78.271979][ T6073] vhci_hcd vhci_hcd.0: disconnect device [ 78.304608][ T6547] netlink: 'syz.3.750': attribute type 13 has an invalid length. [ 78.341367][ T6547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.502832][ T6554] infiniband syz1: set down [ 78.507437][ T6554] infiniband syz1: added veth0_to_bond [ 78.520602][ T6554] RDS/IB: syz1: added [ 78.524868][ T6554] smc: adding ib device syz1 with port count 1 [ 78.531242][ T6554] smc: ib device syz1 port 1 has no pnetid [ 78.566387][ T6555] lo speed is unknown, defaulting to 1000 [ 78.581505][ T6557] loop3: detected capacity change from 0 to 2048 [ 78.588271][ T6557] ext3: Unknown parameter 'measure' [ 78.914761][ T6565] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 78.990793][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 78.990808][ T29] audit: type=1326 audit(1767867472.211:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1aaba62005 code=0x7ffc0000 [ 79.392223][ T29] audit: type=1326 audit(1767867472.591:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 79.764835][ T29] audit: type=1326 audit(1767867472.981:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6536 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 79.831461][ T29] audit: type=1326 audit(1767867473.041:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865e6f749 code=0x7ffc0000 [ 79.854859][ T29] audit: type=1326 audit(1767867473.041:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865e6f749 code=0x7ffc0000 [ 79.878353][ T29] audit: type=1326 audit(1767867473.041:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865e6f749 code=0x7ffc0000 [ 79.901690][ T29] audit: type=1326 audit(1767867473.041:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6865e6f749 code=0x7ffc0000 [ 79.925280][ T29] audit: type=1326 audit(1767867473.041:7031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865e6f749 code=0x7ffc0000 [ 79.948577][ T29] audit: type=1326 audit(1767867473.041:7032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6865e6f783 code=0x7ffc0000 [ 79.971815][ T29] audit: type=1326 audit(1767867473.041:7033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.3.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6865e6f807 code=0x7ffc0000 [ 80.042058][ T6588] siw: device registration error -23 [ 80.201690][ T6600] netlink: 260 bytes leftover after parsing attributes in process `syz.0.760'. [ 80.311820][ T6608] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 80.384885][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.765'. [ 80.478761][ T6616] loop3: detected capacity change from 0 to 512 [ 80.508260][ T6616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.538703][ T6616] EXT4-fs (loop3): 1 truncate cleaned up [ 80.579557][ T6616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.594043][ T6616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.800771][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 80.841386][ T6640] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 80.841386][ T6640] program syz.3.776 not setting count and/or reply_len properly [ 80.891275][ T6649] loop3: detected capacity change from 0 to 128 [ 80.921095][ T6651] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 80.926629][ T6649] syz.3.779: attempt to access beyond end of device [ 80.926629][ T6649] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 80.948732][ T6647] loop5: detected capacity change from 0 to 512 [ 80.956268][ T6647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.956548][ T6651] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 80.975602][ T6647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.988496][ T6647] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.013609][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.176476][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.183938][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.191423][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.198870][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.206295][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.209550][ T6672] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 81.213739][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.213768][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.213791][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.213818][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.213841][ T3501] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 81.224472][ T6672] SELinux: failed to load policy [ 81.240332][ T3501] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 81.299053][ T3501] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 81.406911][ T6686] loop3: detected capacity change from 0 to 1024 [ 81.424258][ T6686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.437907][ T6686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.451761][ T6687] infiniband !yz!: set active [ 81.456475][ T6687] infiniband !yz!: added team_slave_0 [ 81.467288][ T6687] RDS/IB: !yz!: added [ 81.471886][ T6687] smc: adding ib device !yz! with port count 1 [ 81.478352][ T6687] smc: ib device !yz! port 1 has no pnetid [ 81.524744][ T6696] loop3: detected capacity change from 0 to 1024 [ 81.620312][ T6696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.709598][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.745727][ T6704] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.791336][ T6704] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.803477][ T6709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.793'. [ 81.812884][ T6709] netlink: 60 bytes leftover after parsing attributes in process `syz.3.793'. [ 81.828161][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 81.841560][ T6704] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.891679][ T6704] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.994469][ T6710] lo speed is unknown, defaulting to 1000 [ 82.003557][ T6065] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021357][ T6065] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.044660][ T6065] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.064357][ T6065] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.251642][ T6726] loop6: detected capacity change from 0 to 764 [ 82.266742][ T6726] rock: directory entry would overflow storage [ 82.272979][ T6726] rock: sig=0x4654, size=5, remaining=4 [ 82.273679][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.799'. [ 82.291858][ T6728] loop3: detected capacity change from 0 to 512 [ 82.332162][ T6728] EXT4-fs (loop3): 1 orphan inode deleted [ 82.340483][ T6728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.394260][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.415717][ T6737] loop6: detected capacity change from 0 to 512 [ 82.450427][ T6737] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 82.482581][ T6073] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.489272][ T6737] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.803: invalid indirect mapped block 8 (level 2) [ 82.510131][ T6737] EXT4-fs (loop6): Remounting filesystem read-only [ 82.532419][ T6737] EXT4-fs (loop6): 1 truncate cleaned up [ 82.544851][ T6737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.559046][ T6746] xt_hashlimit: size too large, truncated to 1048576 [ 82.668657][ T6747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 82.811932][ T6759] smc: net device bond0 applied user defined pnetid SYZ0 [ 82.825319][ T6759] smc: net device bond0 erased user defined pnetid SYZ0 [ 82.877259][ T6761] random: crng reseeded on system resumption [ 82.937871][ T6806] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.945386][ T6806] tmpfs: Bad value for 'size' [ 82.957198][ T5297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.987522][ T6810] loop6: detected capacity change from 0 to 1024 [ 83.004736][ T6810] loop6: detected capacity change from 0 to 512 [ 83.118789][ T6826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.818'. [ 83.136744][ T6826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.818'. [ 83.151319][ T6833] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.212134][ T6833] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.224982][ T6826] bridge2: entered promiscuous mode [ 83.230302][ T6826] bridge2: entered allmulticast mode [ 83.270661][ T6833] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.313128][ T6833] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.366681][ T6072] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.383056][ T6078] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.402954][ T6078] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.415161][ T6078] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.496404][ T6862] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.601603][ T6880] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.677676][ T6892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.727240][ T6892] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.835: No space for directory leaf checksum. Please run e2fsck -D. [ 83.742569][ T6892] EXT4-fs error (device loop5): ext4_readdir:224: inode #2: comm syz.5.835: path (unknown): directory fails checksum at offset 0 [ 83.773128][ T6906] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 83.794968][ T6906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.804800][ T6909] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.835: No space for directory leaf checksum. Please run e2fsck -D. [ 83.820097][ T6909] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.835: checksumming directory block 0 [ 83.845553][ T6906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.860766][ T6906] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.882188][ T6906] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.895805][ T6892] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.835: No space for directory leaf checksum. Please run e2fsck -D. [ 83.911095][ T6892] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.835: checksumming directory block 0 [ 83.943600][ T6892] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.835: No space for directory leaf checksum. Please run e2fsck -D. [ 83.958982][ T6892] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.835: checksumming directory block 0 [ 83.984879][ T6916] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 83.987524][ T6911] gretap1: entered promiscuous mode [ 84.008885][ T29] kauditd_printk_skb: 1256 callbacks suppressed [ 84.008900][ T29] audit: type=1326 audit(1767867477.221:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.041421][ T6911] bond1: (slave gretap1): making interface the new active one [ 84.042909][ T29] audit: type=1326 audit(1767867477.261:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.052081][ T6911] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 84.080348][ T29] audit: type=1326 audit(1767867477.291:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.104193][ T29] audit: type=1326 audit(1767867477.291:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.127710][ T29] audit: type=1326 audit(1767867477.291:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.151053][ T29] audit: type=1326 audit(1767867477.291:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.171121][ T6915] macvlan0: entered promiscuous mode [ 84.174504][ T29] audit: type=1326 audit(1767867477.291:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.179688][ T6915] macvlan0: entered allmulticast mode [ 84.192423][ T6915] bond1: entered promiscuous mode [ 84.203071][ T29] audit: type=1326 audit(1767867477.291:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.203161][ T29] audit: type=1326 audit(1767867477.291:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.229354][ T6915] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 84.236929][ T29] audit: type=1326 audit(1767867477.291:8299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.5.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 84.296720][ T6915] bond1: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 84.309451][ T6915] bond1: left promiscuous mode [ 84.347247][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.509814][ T3515] Bluetooth: hci0: command 0x1003 tx timeout [ 84.516076][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.569643][ T6937] lo speed is unknown, defaulting to 1000 [ 84.747173][ T6950] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.786116][ T6950] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.974140][ T6971] lo speed is unknown, defaulting to 1000 [ 85.021201][ T6978] lo speed is unknown, defaulting to 1000 [ 85.120868][ T3743] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.170529][ T6993] IPv6: Can't replace route, no match found [ 85.186694][ T6987] EXT4-fs: inline encryption not supported [ 85.192649][ T6987] EXT4-fs: Ignoring removed orlov option [ 85.203582][ T6996] EXT4-fs: inline encryption not supported [ 85.209439][ T6996] EXT4-fs: Ignoring removed orlov option [ 85.230524][ T6987] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 85.240857][ T6996] EXT4-fs: Mount option(s) incompatible with ext3 [ 85.251237][ T6987] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 85.259319][ T6987] System zones: 0-1, 3-12 [ 85.265220][ T6987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.402097][ T7009] __nla_validate_parse: 4 callbacks suppressed [ 85.402116][ T7009] netlink: 36 bytes leftover after parsing attributes in process `syz.2.863'. [ 85.550012][ T7009] lo speed is unknown, defaulting to 1000 [ 85.891911][ T5297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.981030][ T7021] veth0: entered promiscuous mode [ 85.997213][ T7014] set_capacity_and_notify: 5 callbacks suppressed [ 85.997275][ T7014] loop5: detected capacity change from 0 to 128 [ 86.054893][ T7020] loop6: detected capacity change from 0 to 128 [ 86.116868][ T7020] veth0: left promiscuous mode [ 86.138278][ T7014] netlink: 'syz.5.868': attribute type 10 has an invalid length. [ 86.156948][ T7031] loop6: detected capacity change from 0 to 256 [ 86.167263][ T7014] team0: Port device dummy0 added [ 86.176717][ T7031] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000505) [ 86.186914][ T7031] FAT-fs (loop6): Filesystem has been set read-only [ 86.200566][ T7034] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 86.245451][ T7041] loop5: detected capacity change from 0 to 512 [ 86.255501][ T7041] EXT4-fs (loop5): 1 orphan inode deleted [ 86.262066][ T7041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.286377][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.320646][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.877'. [ 86.330087][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.877'. [ 86.388376][ T7051] loop5: detected capacity change from 0 to 1024 [ 86.398593][ T7051] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 86.459483][ T7055] netlink: 19 bytes leftover after parsing attributes in process `syz.5.880'. [ 86.531181][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.541703][ T7055] Falling back ldisc for ttyS3. [ 86.566200][ T7056] loop3: detected capacity change from 0 to 512 [ 86.575593][ T7056] EXT4-fs: dax option not supported [ 87.381062][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 87.389998][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 87.591039][ T7127] tipc: Started in network mode [ 87.595927][ T7127] tipc: Node identity ac14140f, cluster identity 4711 [ 87.609953][ T7127] tipc: New replicast peer: 255.255.255.255 [ 87.616010][ T7127] tipc: Enabled bearer , priority 10 [ 87.640095][ T7121] lo speed is unknown, defaulting to 1000 [ 87.640287][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.903'. [ 87.654761][ T7127] tipc: Disabling bearer [ 87.738524][ T7142] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 87.748614][ T7142] SELinux: failed to load policy [ 87.766661][ T7142] loop6: detected capacity change from 0 to 512 [ 87.819094][ T7142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.844714][ T7142] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.902850][ T7166] netlink: 'syz.2.912': attribute type 10 has an invalid length. [ 87.917246][ T7142] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.906: Failed to acquire dquot type 0 [ 88.080068][ T5297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.197220][ T7189] loop5: detected capacity change from 0 to 512 [ 88.623769][ T7220] loop6: detected capacity change from 0 to 512 [ 88.660169][ T7220] netlink: 60 bytes leftover after parsing attributes in process `syz.6.925'. [ 88.700222][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.925'. [ 88.709104][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.6.925'. [ 88.763990][ T7228] loop5: detected capacity change from 0 to 256 [ 88.813756][ T7228] FAT-fs (loop5): Directory bread(block 64) failed [ 88.824458][ T7235] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 88.824486][ T7235] EXT4-fs: failed to create workqueue [ 88.839507][ T7235] EXT4-fs (loop6): mount failed [ 88.844575][ T7228] FAT-fs (loop5): Directory bread(block 65) failed [ 88.844671][ T7228] FAT-fs (loop5): Directory bread(block 66) failed [ 88.844688][ T7228] FAT-fs (loop5): Directory bread(block 67) failed [ 88.844708][ T7228] FAT-fs (loop5): Directory bread(block 68) failed [ 88.844724][ T7228] FAT-fs (loop5): Directory bread(block 69) failed [ 88.844746][ T7228] FAT-fs (loop5): Directory bread(block 70) failed [ 88.844763][ T7228] FAT-fs (loop5): Directory bread(block 71) failed [ 88.844803][ T7228] FAT-fs (loop5): Directory bread(block 72) failed [ 88.844820][ T7228] FAT-fs (loop5): Directory bread(block 73) failed [ 88.925417][ T7249] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 88.990713][ T6077] kworker/u8:44: attempt to access beyond end of device [ 88.990713][ T6077] loop5: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 89.078537][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 89.078550][ T29] audit: type=1400 audit(1767867482.291:9105): avc: denied { setopt } for pid=7254 comm="syz.5.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.176358][ T29] audit: type=1400 audit(1767867482.381:9106): avc: denied { ioctl } for pid=7254 comm="syz.5.936" path="socket:[18706]" dev="sockfs" ino=18706 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.201057][ T29] audit: type=1400 audit(1767867482.391:9107): avc: denied { create } for pid=7254 comm="syz.5.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.286012][ T7264] random: crng reseeded on system resumption [ 89.296599][ T29] audit: type=1400 audit(1767867482.501:9108): avc: denied { write } for pid=7263 comm="syz.5.938" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.319614][ T29] audit: type=1400 audit(1767867482.501:9109): avc: denied { open } for pid=7263 comm="syz.5.938" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 89.350390][ T29] audit: type=1400 audit(1767867482.561:9110): avc: denied { mount } for pid=7263 comm="syz.5.938" name="/" dev="configfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.373108][ T29] audit: type=1400 audit(1767867482.561:9111): avc: denied { search } for pid=7263 comm="syz.5.938" name="/" dev="configfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.395487][ T29] audit: type=1400 audit(1767867482.561:9112): avc: denied { search } for pid=7263 comm="syz.5.938" name="/" dev="configfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.417675][ T29] audit: type=1400 audit(1767867482.561:9113): avc: denied { read open } for pid=7263 comm="syz.5.938" path="/" dev="configfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.424083][ T7268] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.450987][ T7268] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.501407][ T7268] JBD2: no valid journal superblock found [ 89.507241][ T7268] EXT4-fs (loop5): Could not load journal inode [ 89.514054][ T29] audit: type=1400 audit(1767867482.731:9114): avc: denied { setattr } for pid=7280 comm="syz.6.942" name="secretmem" dev="secretmem" ino=20083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.548602][ T7269] lo speed is unknown, defaulting to 1000 [ 89.637453][ T7297] EXT4-fs: Ignoring removed orlov option [ 89.653865][ T7300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.933942][ T7309] lo speed is unknown, defaulting to 1000 [ 90.849857][ T7310] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 90.863289][ T7310] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 91.115748][ T7327] __nla_validate_parse: 12 callbacks suppressed [ 91.115765][ T7327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.952'. [ 91.131095][ T7327] netlink: 'syz.0.952': attribute type 3 has an invalid length. [ 91.197518][ T7341] tipc: Enabling of bearer rejected, failed to enable media [ 91.401374][ T7366] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.425703][ T7369] lo speed is unknown, defaulting to 1000 [ 91.521646][ T7366] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.622638][ T7366] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.691693][ T7366] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.724095][ T7382] lo speed is unknown, defaulting to 1000 [ 91.768621][ T6065] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.782914][ T6065] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.802401][ T6065] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.820526][ T6065] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.870142][ T7390] netlink: 'syz.5.965': attribute type 30 has an invalid length. [ 92.002844][ T7392] lo speed is unknown, defaulting to 1000 [ 92.362893][ T7411] syzkaller0: entered allmulticast mode [ 92.421379][ T7410] syzkaller0: entered promiscuous mode [ 92.477106][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 92.587800][ T7409] syzkaller0: left promiscuous mode [ 92.593334][ T7409] syzkaller0: left allmulticast mode [ 92.945000][ T3422] hid_parser_main: 26 callbacks suppressed [ 92.945038][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 92.958353][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 92.965787][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 92.973253][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 92.980677][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 92.988090][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 92.995542][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 93.003066][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 93.010518][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 93.017898][ T3422] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 93.143610][ T7424] set_capacity_and_notify: 4 callbacks suppressed [ 93.143625][ T7424] loop5: detected capacity change from 0 to 1024 [ 93.211271][ T7424] EXT4-fs: Ignoring removed bh option [ 93.229006][ T7424] EXT4-fs: inline encryption not supported [ 93.254285][ T7424] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.289633][ T7424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 93.318955][ T7424] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.975: lblock 2 mapped to illegal pblock 2 (length 1) [ 93.338814][ T7424] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.975: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.343066][ T3422] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 93.362797][ T7424] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.975: Failed to acquire dquot type 0 [ 93.374592][ T7424] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.384334][ T7424] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.975: mark_inode_dirty error [ 93.399384][ T7424] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 93.409805][ T7424] EXT4-fs (loop5): 1 orphan inode deleted [ 93.440369][ T289] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 93.455061][ T289] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 93.471463][ T3743] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 93.484627][ T3743] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 93.494187][ T3743] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 93.622321][ T7447] loop5: detected capacity change from 0 to 164 [ 94.132498][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 94.132512][ T29] audit: type=1400 audit(1767867487.351:9770): avc: denied { unmount } for pid=3743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.291989][ T29] audit: type=1326 audit(1767867487.501:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292088][ T29] audit: type=1326 audit(1767867487.501:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292114][ T29] audit: type=1326 audit(1767867487.501:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292138][ T29] audit: type=1326 audit(1767867487.501:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292158][ T29] audit: type=1400 audit(1767867487.501:9775): avc: denied { create } for pid=7463 comm="syz.5.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.292205][ T29] audit: type=1326 audit(1767867487.501:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292230][ T29] audit: type=1326 audit(1767867487.501:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292305][ T29] audit: type=1326 audit(1767867487.501:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.292325][ T29] audit: type=1326 audit(1767867487.501:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7463 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaba2f749 code=0x7ffc0000 [ 94.317549][ T3422] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 94.471988][ T7434] syz.3.981 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 94.542299][ T7434] CPU: 1 UID: 0 PID: 7434 Comm: syz.3.981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 94.542330][ T7434] Tainted: [W]=WARN [ 94.542336][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.542347][ T7434] Call Trace: [ 94.542353][ T7434] [ 94.542434][ T7434] __dump_stack+0x1d/0x30 [ 94.542459][ T7434] dump_stack_lvl+0x95/0xd0 [ 94.542541][ T7434] dump_stack+0x15/0x1b [ 94.542558][ T7434] dump_header+0x81/0x240 [ 94.542579][ T7434] oom_kill_process+0x295/0x350 [ 94.542637][ T7434] out_of_memory+0x97b/0xb80 [ 94.542668][ T7434] try_charge_memcg+0x610/0xa10 [ 94.542751][ T7434] charge_memcg+0x51/0xc0 [ 94.542775][ T7434] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 94.542858][ T7434] __read_swap_cache_async+0x17b/0x2d0 [ 94.542885][ T7434] swap_cluster_readahead+0x262/0x3c0 [ 94.542915][ T7434] swapin_readahead+0xde/0x820 [ 94.542941][ T7434] ? mempool_free_slab+0x1d/0x30 [ 94.543010][ T7434] ? __rcu_read_unlock+0x4f/0x70 [ 94.543027][ T7434] ? mempool_free_slab+0x1d/0x30 [ 94.543087][ T7434] ? kmem_cache_free+0x327/0x3a0 [ 94.543110][ T7434] ? __rcu_read_unlock+0x4f/0x70 [ 94.543137][ T7434] ? swap_cache_get_folio+0x277/0x280 [ 94.543169][ T7434] do_swap_page+0x2b4/0x21e0 [ 94.543194][ T7434] ? sbitmap_queue_clear+0xcf/0xf0 [ 94.543214][ T7434] ? __rcu_read_unlock+0x4f/0x70 [ 94.543282][ T7434] ? __pfx_default_wake_function+0x10/0x10 [ 94.543315][ T7434] handle_mm_fault+0x9d8/0x2c60 [ 94.543419][ T7434] do_user_addr_fault+0x630/0x1080 [ 94.543476][ T7434] exc_page_fault+0x62/0xa0 [ 94.543504][ T7434] asm_exc_page_fault+0x26/0x30 [ 94.543525][ T7434] RIP: 0033:0x7f6865d2d71f [ 94.543540][ T7434] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 94.543588][ T7434] RSP: 002b:00007ffd56898948 EFLAGS: 00010202 [ 94.543606][ T7434] RAX: 00000000817268d3 RBX: 00007f6866bf5720 RCX: 0000000000000005 [ 94.543620][ T7434] RDX: 00000000000008d3 RSI: ffffffff817268d3 RDI: 0000000000000008 [ 94.543634][ T7434] RBP: ffffffff817268d3 R08: 00007f68660b0000 R09: 00007f68660b2000 [ 94.543647][ T7434] R10: 00000000817268d7 R11: 0000000000000008 R12: 0000000000000008 [ 94.543683][ T7434] R13: 0000000000000000 R14: ffffffff81726559 R15: 0000000000000005 [ 94.543740][ T7434] ? __bpf_get_stack+0x39/0x650 [ 94.543766][ T7434] ? __bpf_get_stack+0x3b3/0x650 [ 94.543798][ T7434] ? __bpf_get_stack+0x3b3/0x650 [ 94.543822][ T7434] [ 94.543861][ T7434] memory: usage 221660kB, limit 307200kB, failcnt 42015 [ 94.543875][ T7434] memory+swap: usage 283408kB, limit 9007199254740988kB, failcnt 0 [ 94.543888][ T7434] kmem: usage 221584kB, limit 9007199254740988kB, failcnt 0 [ 94.543941][ T7434] Memory cgroup stats for /syz3: [ 94.552023][ T7434] cache 0 [ 94.552035][ T7434] rss 24576 [ 94.552041][ T7434] shmem 0 [ 94.552046][ T7434] mapped_file 0 [ 94.552052][ T7434] dirty 0 [ 94.552058][ T7434] writeback 4096 [ 94.552064][ T7434] workingset_refault_anon 201 [ 94.552070][ T7434] workingset_refault_file 7367 [ 94.552077][ T7434] swap 63209472 [ 94.552139][ T7434] swapcached 28672 [ 94.552146][ T7434] pgpgin 262683 [ 94.552154][ T7434] pgpgout 262669 [ 94.552161][ T7434] pgfault 86936 [ 94.552168][ T7434] pgmajfault 155 [ 94.552174][ T7434] inactive_anon 4096 [ 94.552181][ T7434] active_anon 36864 [ 94.552186][ T7434] inactive_file 0 [ 94.552193][ T7434] active_file 16384 [ 94.552198][ T7434] unevictable 0 [ 94.552205][ T7434] hierarchical_memory_limit 314572800 [ 94.552289][ T7434] hierarchical_memsw_limit 9223372036854771712 [ 94.552297][ T7434] total_cache 0 [ 94.552303][ T7434] total_rss 24576 [ 94.552309][ T7434] total_shmem 0 [ 94.552318][ T7434] total_mapped_file 0 [ 94.552324][ T7434] total_dirty 0 [ 94.552331][ T7434] total_writeback 4096 [ 94.552338][ T7434] total_workingset_refault_anon 201 [ 94.552345][ T7434] total_workingset_refault_file 7367 [ 94.552354][ T7434] total_swap 63209472 [ 94.552386][ T7434] total_swapcached 28672 [ 94.552394][ T7434] total_pgpgin 262683 [ 94.552402][ T7434] total_pgpgout 262669 [ 94.552410][ T7434] total_pgfault 86936 [ 94.552418][ T7434] total_pgmajfault 155 [ 94.552426][ T7434] total_inactive_anon 4096 [ 94.552435][ T7434] total_active_anon 36864 [ 94.552442][ T7434] total_inactive_file 0 [ 94.552450][ T7434] total_active_file 16384 [ 94.552457][ T7434] total_unevictable 0 [ 94.552478][ T7434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.981,pid=7434,uid=0 [ 94.552630][ T7434] Memory cgroup out of memory: Killed process 7434 (syz.3.981) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 94.601506][ T7471] loop6: detected capacity change from 0 to 512 [ 94.602125][ T7471] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 94.614540][ T7471] EXT4-fs (loop6): 1 truncate cleaned up [ 94.683487][ T7481] loop3: detected capacity change from 0 to 2048 [ 94.757154][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 95.046918][ T7497] lo speed is unknown, defaulting to 1000 [ 95.169999][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 95.196917][ T7501] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.370759][ T7501] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.379684][ T7516] loop5: detected capacity change from 0 to 512 [ 95.405048][ T7516] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.997: EA inode hash validation failed [ 95.422065][ T7516] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.997: corrupted inode contents [ 95.435655][ T7516] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.997: mark_inode_dirty error [ 95.451221][ T7516] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.997: corrupted inode contents [ 95.464659][ T7516] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.997: mark_inode_dirty error [ 95.478524][ T7516] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.997: mark inode dirty (error -117) [ 95.502181][ T7501] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.652282][ T7516] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 95.664056][ T7516] EXT4-fs (loop5): 1 orphan inode deleted [ 95.685438][ T7516] EXT4-fs mount: 8 callbacks suppressed [ 95.685483][ T7516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.869888][ T7501] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.941455][ T6065] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.953345][ T6065] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.973171][ T6065] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.989327][ T6065] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.052101][ T3743] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.071163][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1000'. [ 96.107539][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'. [ 96.119119][ T7532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53 sclass=netlink_audit_socket pid=7532 comm=syz.5.1001 [ 96.212942][ T7546] loop3: detected capacity change from 0 to 128 [ 96.228457][ T7546] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.240863][ T7546] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.285849][ T289] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 96.331027][ T7555] program syz.3.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.380704][ T7553] lo speed is unknown, defaulting to 1000 [ 96.414711][ T7559] openvswitch: netlink: Flow key attr not present in new flow. [ 96.452885][ T3379] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 96.634559][ T7564] loop6: detected capacity change from 0 to 1024 [ 96.792899][ T7567] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 96.992273][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 97.056828][ T7581] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.1015'. [ 97.534549][ T7580] loop3: detected capacity change from 0 to 512 [ 97.541291][ T7580] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 97.556179][ T7580] EXT4-fs: error: could not find journal device path [ 97.571699][ T7578] loop6: detected capacity change from 0 to 1024 [ 97.587842][ T7578] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.620163][ T7578] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1017: Invalid block bitmap block 0 in block_group 0 [ 97.633916][ T7584] loop5: detected capacity change from 0 to 2048 [ 97.641670][ T7578] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1017: Failed to acquire dquot type 0 [ 97.654318][ T7578] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.1017: Freeing blocks not in datazone - block = 0, count = 4096 [ 97.656015][ T7584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.694581][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 97.712567][ T7578] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1017: Invalid inode bitmap blk 0 in block_group 0 [ 97.729554][ T7584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.738008][ T6073] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:43: Failed to release dquot type 0 [ 97.758195][ T7578] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 97.785329][ T7578] EXT4-fs (loop6): 1 orphan inode deleted [ 97.792034][ T7578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.850452][ T31] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 97.872643][ T5297] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.882082][ T3379] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 97.891150][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 97.891175][ T31] EXT4-fs (loop5): This should not happen!! Data will be lost [ 97.891175][ T31] [ 97.891186][ T31] EXT4-fs (loop5): Total free blocks count 0 [ 97.919028][ T31] EXT4-fs (loop5): Free/Dirty block details [ 97.924958][ T31] EXT4-fs (loop5): free_blocks=4096 [ 97.930190][ T31] EXT4-fs (loop5): dirty_blocks=656 [ 97.935392][ T31] EXT4-fs (loop5): Block reservation details [ 97.941388][ T31] EXT4-fs (loop5): i_reserved_data_blocks=41 [ 97.994064][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 624 with error 28 [ 98.157750][ T7629] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1032'. [ 98.166857][ T7629] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1032'. [ 98.175847][ T7629] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1032'. [ 98.185627][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.203559][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.453321][ T7661] loop6: detected capacity change from 0 to 128 [ 98.508540][ T7654] syz.6.1039: attempt to access beyond end of device [ 98.508540][ T7654] loop6: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 98.558548][ T7664] ================================================================== [ 98.566680][ T7664] BUG: KCSAN: data-race in init_file / prepare_creds [ 98.573358][ T7664] [ 98.575666][ T7664] write to 0xffff8881367dbbe8 of 4 bytes by task 7665 on cpu 0: [ 98.583287][ T7664] init_file+0x2e/0x1c0 [ 98.587483][ T7664] alloc_empty_file+0x8b/0x200 [ 98.592257][ T7664] path_openat+0x63/0x23b0 [ 98.596673][ T7664] do_filp_open+0x109/0x230 [ 98.601172][ T7664] do_sys_openat2+0xa6/0x150 [ 98.605760][ T7664] __x64_sys_openat+0xf2/0x120 [ 98.610515][ T7664] x64_sys_call+0x2b07/0x3000 [ 98.615184][ T7664] do_syscall_64+0xca/0x2b0 [ 98.619684][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.625580][ T7664] [ 98.627893][ T7664] read to 0xffff8881367dbb40 of 184 bytes by task 7664 on cpu 1: [ 98.635599][ T7664] prepare_creds+0x6e/0x550 [ 98.640089][ T7664] copy_creds+0x8f/0x340 [ 98.644330][ T7664] copy_process+0x638/0x1ef0 [ 98.648921][ T7664] kernel_clone+0x16c/0x5c0 [ 98.653424][ T7664] __x64_sys_clone+0xe6/0x120 [ 98.658093][ T7664] x64_sys_call+0x12d0/0x3000 [ 98.662779][ T7664] do_syscall_64+0xca/0x2b0 [ 98.667303][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.673186][ T7664] [ 98.675492][ T7664] Reported by Kernel Concurrency Sanitizer on: [ 98.681633][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.6.1042 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 98.692913][ T7664] Tainted: [W]=WARN [ 98.696698][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.706742][ T7664] ==================================================================