last executing test programs: 4m16.271331563s ago: executing program 32 (id=235): socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_setup(0x179a, &(0x7f00000000c0)={0x0, 0xfb29, 0x100, 0x2, 0x2f5}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) pipe(&(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000005c0)={@local, @empty, @void, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x5, 0x4, 0x1, 0x3a, 0x24, 0x65, 0x0, 0x10, 0x21, 0x0, @broadcast, @rand_addr=0x64010102}, {{0x5e20, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x2, 0x4, "d7839f", 0x2, "40360e"}}}}}}}, 0x0) 4m0.191909594s ago: executing program 33 (id=663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x61, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000700008802400078008000600480000000800050040ffa73808000600ea0000000300050004b2e8222c000780080006"], 0x164}}, 0x24000000) 3m56.842936726s ago: executing program 34 (id=715): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x7, 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x16, 0x0, @tid=r3}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 3m52.686131353s ago: executing program 35 (id=774): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0xf, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8001}]}}]}, 0x9c}}, 0x0) 2m49.110465821s ago: executing program 36 (id=1422): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r0}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2m28.826581962s ago: executing program 1 (id=1827): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3) close(r1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'gretap0\x00', 0xd6f}) shutdown(r5, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150015062de612ea40f81dda2c4ca62b44993f9e70bf19"], 0x14}, 0x1, 0x0, 0x0, 0x6004000}, 0x8084) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents(r7, &(0x7f00000000c0)=""/35, 0x23) setresuid(0xee01, 0xee00, 0x0) unshare(0x20000600) io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) 2m28.685426848s ago: executing program 1 (id=1830): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) 2m28.6433789s ago: executing program 1 (id=1832): socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f0000000040), 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x20, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_MAP={0x24, 0xe, {0x3728, 0x2, 0x9, 0xc4, 0x2, 0x9}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x64068880}, 0x2000c851) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000180)=""/138, &(0x7f0000000040)=0x8a) (async) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_read_part_table(0x60e, &(0x7f00000007c0)="$eJzs3D9olGccB/DvJbk7o9A4OLnUOHQSiuLoDVWSq2IhnJZCcLD/EGmmCIGTHqbo0GaImEE6dpHCdYhxUjM4KQqdizi0CBlcCnaR2iFX7u4luUAplkZK8fMZ7ve8Lz+e7/uDZ30u/K8NpVysOtVeefeTv+3vjG2u5/Nhe2LyeKfT6ZxOSjmTcsbLb60kGcnWXbM/SWVgnxvf7Vz95rf3y+0np168c/b+wtDGntXsTrJrsDmjf/Up1X82Ka/Dcu3BWC3JYveh3lpb/yi5+XyicefkwtLKifKxz7rvLyUPi/7+wRjNhTRzMV/k45FXjvpqc1nakj9/Zba+2Kydf1xvrX3bfnpwfW99+Pa5Iy/3rV69dyiZ60ZMpXfYN1X+5eAD+ZcH8ufGr00vtY4euLXn+uHm3UeNZ8O/d/qKyPL25AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Hosd3+uzNYXm7Xzj+utta9/+vGDm88nGndOLiytnKgc+7noe1jUkaJeSDMXU04yk5l8ntlXj5wuDebXHoxd3sj/Y2fy9OD63nr79rkjLydXr9471OsqZapbhrZj4q2WR9LLz+7+89z4teml1tEDt/ZcP9y8+6jxbLj/fqaaT3vjJqlu/2cAAAAAAAAAAAAAAAAAAADwhpuYPL5v6r3G6aSUMzuS/Ppl75Z9pzr6Q3o37/v2F7VS1Bs7+v8F0H5y6kXl7P2FX4pL8fOpZj7Jru+7nW9v5FzaGlve3Jn/0p8BAAD//83YiVM=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4642, 0x1eb) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffde7, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 2m28.307512455s ago: executing program 1 (id=1836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ee, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 2m28.220874738s ago: executing program 1 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xfffffffffffffffb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.103443963s ago: executing program 1 (id=1840): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = dup(r1) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r7, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 2m12.902788488s ago: executing program 37 (id=1840): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = dup(r1) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r7, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1m53.696272433s ago: executing program 5 (id=2356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b0001007461726765740000400002802c000300000000000455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff50000000000000000000000000800024000000000080001004c4544000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) socket$inet(0x2, 0x800, 0x813) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x34, 0x2, 0x8, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x15) 1m53.633259406s ago: executing program 5 (id=2357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ppoll(&(0x7f00000000c0)=[{r4, 0x8040}, {r3, 0x200}], 0x2, 0x0, 0x0, 0x0) write$ppp(r4, &(0x7f0000000200)="bc72", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x13, 0x1, 0x800, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x44, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ptrace$setopts(0x4206, r2, 0x80000000, 0x10) 1m52.737332574s ago: executing program 5 (id=2374): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000080)={[{@dioread_lock}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrquota}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@nobh}, {@grpid}], [], 0x2c}, 0x1, 0x4d8, &(0x7f0000000900)="$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") mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000002a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 1m52.461325316s ago: executing program 5 (id=2378): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@grpid}, {@nodiscard}, {@commit={'commit', 0x3d, 0x5}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/ptype\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) pread64(r4, &(0x7f0000002800)=""/209, 0xd1, 0x8) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1m52.014754715s ago: executing program 5 (id=2382): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) 1m51.168893211s ago: executing program 5 (id=2398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xac, 0xa, 0x78, 0x40000}, {0x6, 0x8, 0x40, 0x7fff0000}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200010c4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) shutdown(r1, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000003c0)={0x20, 0x1, 0x1c, 0xe0, 0x0, 0x40007, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000500000000000000000000000b030000000000000061"], 0x0, 0x52}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) clock_adjtime(0xfffffff3, 0x0) 1m51.150666002s ago: executing program 38 (id=2398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xac, 0xa, 0x78, 0x40000}, {0x6, 0x8, 0x40, 0x7fff0000}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x200010c4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) shutdown(r1, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000003c0)={0x20, 0x1, 0x1c, 0xe0, 0x0, 0x40007, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000500000000000000000000000b030000000000000061"], 0x0, 0x52}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) clock_adjtime(0xfffffff3, 0x0) 1m29.837349086s ago: executing program 4 (id=2782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) (async, rerun: 64) fdatasync(0xffffffffffffffff) (rerun: 64) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) (async, rerun: 32) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu>00||!') (async) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)={0x0, 0x3938700}, 0x1, 0x20, 0x1}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000040)='./file0\x00', 0x12f) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x18) (async, rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r13}, 0x10) r14 = dup(r12) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00b\x00\x00\x00\x00', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB=',k']) (async) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff0200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677265001400028005000900c00000000500080010000000af83c51fd502a35ea852d431fc89e4e2cdaa887f05b27ba3b883a95e754e6b37c8582fcb8f99363a0aba930112d417213cba77fe"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) 1m29.688134232s ago: executing program 4 (id=2788): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002680), 0x8402, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)) fcntl$setstatus(r1, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40042, 0x121) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) faccessat(0xffffffffffffffff, 0x0, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0xda90) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) 1m29.648895594s ago: executing program 4 (id=2789): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x2, 0x80000001, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffdffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000002040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) fallocate(r1, 0x0, 0x0, 0x400001) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x18, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = getuid() getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) r9 = getegid() timer_settime(r2, 0x1, &(0x7f0000000440)={{0x77359400}}, &(0x7f0000000540)) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x9}, [{0x2, 0x6, r5}, {0x2, 0x7, r6}, {0x2, 0x7, 0xee00}, {0x2, 0x1, r7}, {0x2, 0x4}, {0x2, 0x0, r8}], {}, [{0x8, 0x4, 0xee01}, {0x8, 0x4}, {0x8, 0x0, r9}], {0x10, 0x4}, {0x20, 0x7}}, 0x6c, 0x1) 1m29.501155561s ago: executing program 4 (id=2792): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040), 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$eJzs3U9rI2UcB/DfpOlk1ENy8CTCDrgHT4vdm3hJkV0Qe3LJYfWgxd0FaYKwCwX/YNyTVy8ePPgKBMGL72IvvgPBq+DNFRZGZjLTTGraJtpUbD+fS3995vnO8zzp0zQ55OkHL08O7uXx4PHnv0SWJdEZxjCeJjGITjS+jAXDrwMA+D97WhTxezGzTi6JiGxz0wIANmi1v//defnjhUwLANigO3fffXt3b+/WO1lkcXvy1eGofGdffp1d330QH8U47sdr0Y9nEdXrhPqNf1nfLopi2s1Lg7g+mR6OyuTk/Sf1/Xd/i6jyO9GPwVGserVR5d/au7VTxfNeKz8t5/F8Pf6wzN+Mfrx4FF7I35zl83Y+Rmm8+kpr/jeiHz9/GB/HOO5Vk5jnv9jJ8zeLb/747L1yemU+mR6OelW/uWLrIn8uAAAAAAAAAAAAAAAAAAAAAABcbjfy5vCd/Fpcn5RN9fk7W8/Suk/dZTBPlddnVdI0tc4HKk2L+G52pOD2wnjz83268VK3fbAgAAAAAAAAAAAAAAAAAAAAXF2PPvn0YH88vv/wXIrmNIBuRPx5J+Kf3mfYarkWp3fu1WPuj8edulzo8yRtt8RW0yeJOHUa5SLO6WE5q3guOzbnpvj+h3KB69wwa7W8vnyB22et627v3+6NZncd7CfLx+pF05LVm+TbNGLeJ40Vx0pPulREe/udteR06aX+2mtPX6iK6Yl9imTJFm0Vb/w6u163JHHslyitHtWlo2/XRSt+bG+stJ8jm8X//lyRVKd19DbxNAQAAAAAAAAAAAAAAAAAACx8xrv87qfFi49PjXYKHwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JKY////NYppHV6hcxoPH/3HSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//cutM2w==") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) sendto$l2tp(r0, &(0x7f0000000080)="e5786a0d000000000000c83b", 0xc, 0x4000081, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65299, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000340), 0xa}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4620, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) writev(r2, &(0x7f0000000600)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000380)="c61e3cc7a3c7c161cc6c7bb49652286c086895b81fac00fc1930fed26d70857ca01b0e7ade8b9db03de0b6a3a6586c040e539d325ae3da987b3ee97dd369559caa3fe4d6758f2bdd00f0d57354e98fd4346c419f7955d0f25e462369b5071b348cccfc53fb7a4dc6e70333504b76b9b231a3b0c6f78b43db98e14fb7313053b8e0fffb6b48f732dac5a76cc18982679c0190cb756c3458a829be9e0e95fb0d056ba8bc8e9b2742", 0xa7}, {&(0x7f0000000540)="3933720ad87acfe83a9a1100", 0xc}], 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x60000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) fstatfs(r2, &(0x7f0000000040)=""/10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f0000001180), 0x4000) 1m29.464294072s ago: executing program 4 (id=2795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r3}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES32=r5, @ANYRESOCT=r4], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002e0001000000000000000000010100800c0001"], 0x114}], 0x1}, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r8}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sync() r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000900000000000000797a30000000002c000000030a01020000000000000000020000000900010073797a30000000000c0002400000000000000001140000001100010000000000000000000200000a9453f48afc3debebeca328cd68d13e34449b35837c25ed643555fdebef72ebbbb957be179219c7c48f6fe1d9288e68e2718ab1cbf712d0c84c6d1b9eee0a5eeab0e9bd3c940fc1541def606e33134d91a6113a3fcdab9fd4ad55a497507ed4c093a10f65648f52"], 0x80}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1m29.310301789s ago: executing program 4 (id=2800): accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='qdisc_destroy\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r4, &(0x7f0000000240)='./bus/file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c00000004060104000000000000000500090027000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200", 0x3c, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x1e, 0x4, 0x0) close_range(r11, 0xffffffffffffffff, 0x200000000000000) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) 1m29.29039112s ago: executing program 39 (id=2800): accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='qdisc_destroy\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r4, &(0x7f0000000240)='./bus/file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c00000004060104000000000000000500090027000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200", 0x3c, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket(0x1e, 0x4, 0x0) close_range(r11, 0xffffffffffffffff, 0x200000000000000) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) 1m28.171374177s ago: executing program 8 (id=2822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d0000008500000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) 1m28.150261178s ago: executing program 8 (id=2823): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001a40)=ANY=[], 0x1, 0x22d, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x1000848, &(0x7f0000000080)=ANY=[], 0x3, 0x357, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m27.805024012s ago: executing program 8 (id=2825): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'bond0\x00'}}, 0x1e) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000001840)={0x11bc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x101c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x31de}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa7, 0x3, "948a0473774a37cd3bc32126314c39dc3ae8859b3e8b67daf12108c236b7b27f2b02442fc4452e5002da68803906c03d7612c9d1359959da1147b1d12572eecf252428f6d5341f06babc0ff38fd235b7fd6ed111c97763411752c86a5c5f494e6110b0b6e37a5bf66e716bbeab003465f13e3616e7c9cd3a2d05214537e946d64ef8b8c6911d61603844d86003334edbac3e77138e7ebc15dedafbe13498337af332d6"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xce7e}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6e2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x8000}, 0x3735fca37465f581) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c88f9c1", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 1m27.109012082s ago: executing program 8 (id=2828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000000)="304a5b756cd32c79b95bd91173a2062d18176e8dc169dd30ede1bcb5012225a88beaec436f20ee4c37202d26d62376ea403d57e28935f45951c874bb6654f505d24b852a7b29a091f071aa31c2afedb8f61e99726875dc6b00b7d7ea2736394cd5244fb733565d2e2e5a35fd8939a436a88d806e9cdbf82b", 0x78}, {&(0x7f0000000280)="e0520066edad28bd424c9376fce602513f2969be2847e47f6059fba4e73ff34fe37b01667c90c99854aa09eafb7d277153336cffb246fe72c49974ab88ceb6de930c64dc5c763588840dc58f61e333130b992cad65ed919f4008e9098654ec95c9914f8a4301c75f7fd19ec0651680e906f3aea2b6256210847791fe07f6cedd5fc0f990702604def9d4dc2e0d7d01c1e2812fd8e833d50f0c", 0x99}, {&(0x7f00000001c0)="5b6b6f84b92b822494e0338a381eba836f7d5f32c48c5b652e81d7ee4a98b59a2b7d75bce12baa8f4399432c2f583e722582ea0ff43fb06682fc0c66d5130f7b7dfcda0062ab5daaf97fbd77a29fe81f97dc811f39df3dbbdbf09781a6eb99", 0x5f}, {&(0x7f00000004c0)="b842bedf5536245e454e78c7a27e8757cbfb02de7faf693082803b02cebf97eac7de2dc4083e56745d42dd4a77df7607969b7e5d8eb762c20faa8d0d07a0699ec91632606b5ca47996b465587710bd01bc570091bbb873896484e4b60f937b478d23b3adc4afaf4afc22969667422e0ea91be4d01af2aaa2a810d3ef3b01e1b1adbfc1b9daaba6983f7beca144b56f3d527428736723cc332d20ff2a182e583f436f29e45a4e67c9a2ba0d23ac1640a7ce6f432555b5d9560281f9173ca1fb3a27c6fae68d55942d87", 0xc9}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f00000005c0)="95f4a80e697235b576059e42384a65e2975bd4b234c6ce72d909877b9f3d4d0624d3aaa37cd77810788582720cea2c891bb3bbe28460a5e81ca0cd139a22d35bd62f5dbae64041a0203b80856577db583e589657e77037d0ff2b5687e722391753feed9454c2569f7db2e5dafa8844e463f02a67d64c0bdb97079834638b940bec362a7ec6d6b4e63a66a9f0150c5e79bbcf05d22f40493a87870da26021b7853acfae85ab196473b7c006749fb34be3cf564b0be2f57e9f7b7a524aecff93d5edf7889f1331a7ede28e27fa64c584be41b2636a35c663a29f09a142b768070bff11b99eb0d23dd1dab077ac392c83", 0xef}, {&(0x7f00000006c0)="a304a4a28f28ba3acce6edffdb528493cd1d73c0bfad500b4d3a9f2e7ec9a9cdf49d5fc63f4a5c61858f81709d5558c76a3d93efb68bdeb04aead557af685e63e905cd7bed2260f7594b50bbf155b01521fe17fd31bba1e9b20287c6f72cc7a3b2683da5ecce6db8b74205ff08a932dd33bb507d6eb24d83779226a675bb5ec37ac31642f45d075a57350377c4850073a2b9f0b8e56510795fa5272bc985b461d4c942e5054d1426ff0fe569583ba2dd308adad74a6e9c8b70", 0xb9}], 0x7) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071102e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x17, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r9, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1m26.628239613s ago: executing program 8 (id=2837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1880000000000000000000000000000074a89008c658b08a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) (async) finit_module(0xffffffffffffffff, &(0x7f0000000080)='kfree\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 1m26.22402825s ago: executing program 8 (id=2840): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d3"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x16) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x730, 0x10, 0x3, 0x2, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x64, 0x0, 0xa4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x9e, 0x1, 0x3, [{@empty, 0x3cb}, {@loopback, 0x8}, {@broadcast, 0xfffffffe}, {@loopback, 0x5}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xf0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @rr={0x7, 0x1b, 0x15, [@private=0xa010102, @remote, @loopback, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001200)={'gretap0\x00', &(0x7f0000001180)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x10, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast2, @empty}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3103000000f1000000de0800000008000300", @ANYRES32=r8, @ANYBLOB="080006"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xc8, r2, 0x11b, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1m26.162690272s ago: executing program 40 (id=2840): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x16) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x730, 0x10, 0x3, 0x2, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x64, 0x0, 0xa4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0x9e, 0x1, 0x3, [{@empty, 0x3cb}, {@loopback, 0x8}, {@broadcast, 0xfffffffe}, {@loopback, 0x5}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xf0}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @rr={0x7, 0x1b, 0x15, [@private=0xa010102, @remote, @loopback, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001200)={'gretap0\x00', &(0x7f0000001180)={'ip_vti0\x00', 0x0, 0x40, 0x8000, 0x10, 0x5, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x9, 0x29, 0x0, @multicast2, @empty}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3103000000f1000000de0800000008000300", @ANYRES32=r8, @ANYBLOB="080006"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xc8, r2, 0x11b, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) fcntl$setlease(r1, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 23.948100373s ago: executing program 2 (id=3760): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0xde6e6af14e9ec40f) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 23.880876086s ago: executing program 2 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1858e5603500800e000000000000000000110000", @ANYRES32=r0, @ANYBLOB="007eecee4a00000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000009513efe1aa4a52c2224ffbfa08ebd09082f0b59b62afe269861febaa7bd2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x3, 0x554, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000005c0)="d7cac954466b0c416b94cddfe6cd069ac28f5bcd84f1e9c39538c1574c4815df5f1189f42331cdaea1e71dac2c8f00c12442939112c38cd2f1dc8a580f6674a18cc2839c747c49fe8287ce5734951e926a9bcfe25788e0faf49516e722493b0ab092d1779cfdc00c03e3993d6f8c82fc7f5b3e8df183c99909a137f8c3f0a41b276149fcbb753ccf33472c07b642aff161c25942f32baf1bbcf453fe4cfd01331af154fc671e783118e0f77f6af7f568a36b5254f55d6a0cffed33", 0xbb}, {&(0x7f0000000680)="a2e470b63e9a3f844b45f9305e6f7c6d4eaf3a534583dc1058130c30586d8c4a6dce4c6e7834028a050cef99aa4482b116df278e84ca3f544bfa696be07a00dd38787c05abcc20e3500ab1d27b7ddfda52c6a5c95fa85192a200f0de712d71da3d44", 0x62}, {&(0x7f0000000780)="93bf5411be033b6061c37a52d4330cfbda728f4532f11b5d444646411d127916a6fc658ac56783ad1a93da713bd0f064b3ac9a37aeab020fa8b0f4d6c02b04a0b2d88a72d1", 0x45}, {&(0x7f0000000800)="161ee3cf90961a570df98158bc7a2a0344e9a69a5b159e2b65784f7ab92e18b6124fe307400f4f3cc4a159311bf2cd540584922da7fe9066047635f12b51b3b0ac7ff28c862892ee71457085daf11c4bbb6b4494957937f83cb0202d18619ddd5248cb98bf359f2e8071213d928931a11815a7265cf0b609ff3844d236461f1f3a18d79c2ff19c6a733dee5b958edf4f46a731947f66477a2e45111fb33d9fe9cc694bc176ec2461aaf969655b7848713e173b9c0248845e2f19", 0xba}, {&(0x7f0000000700)="32f59a73a9d390bf056ec3d5f7093fd40430769236b763f13ab29f9c", 0x1c}], 0x5, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8c}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x54, [@rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @multicast1]}, @ssrr={0x89, 0x1b, 0x63, [@multicast1, @rand_addr=0x64010102, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0xf}]}, @rr={0x7, 0x7, 0xc7, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xd3, [@remote]}, @ssrr={0x89, 0xf, 0x79, [@private=0xa010101, @loopback, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x5, 0x1, 0x1, [{@multicast1, 0x37df}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfffffffc}, {@broadcast, 0x9}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x0, [{@remote, 0x10000}, {@rand_addr=0x64010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x618f}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc54c}]}, @generic={0x44, 0x9, "221501dc1d7615"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x148}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = getpgid(0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x3d, @buffer={0x42, 0x50, &(0x7f00000000c0)=""/80}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000cc0)={0x0}, &(0x7f0000000d00)=0xc) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f00000013c0)={0x160, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x160}}, 0xc0c0) r13 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r13, 0x7, 0x0, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24008800) 23.155482477s ago: executing program 2 (id=3771): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) rt_sigtimedwait(&(0x7f0000000000)={[0x3]}, &(0x7f0000000080), &(0x7f0000000100)={0x77359400}, 0x8) 21.995402916s ago: executing program 2 (id=3786): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x34, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10000}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x28}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x2000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfe33) syz_io_uring_setup(0x64d, 0x0, 0x0, &(0x7f0000000080)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000040c0)={0x2200000, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, &(0x7f0000004080)=[0x0], 0x1}, 0x58) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x148, 0x230, 0x148, 0x300, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xc3b, 0xc3, 0x8, 0x1}}, @common=@hbh={{0x48}, {0x0, 0x5, 0x0, [0x0, 0x9, 0x1, 0xf, 0x647, 0x6, 0x7, 0x0, 0x45, 0x0, 0x8, 0xf, 0x6, 0x5, 0x5, 0x3], 0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @empty, [0xff000000], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x58, 0x140b, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000002}, 0x4000400) 21.811395683s ago: executing program 2 (id=3793): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18004800000700d50000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) unlink(&(0x7f0000000100)='./file0/file1\x00') sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) msync(&(0x7f0000f74000/0x3000)=nil, 0x3000, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 21.535803085s ago: executing program 2 (id=3800): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x3}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x20) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000080) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0xef13dfe43f63670a, 0x700, 0x3, 0x6, {{0x37, 0x4, 0x0, 0x7, 0xdc, 0x68, 0x0, 0x9, 0x2f, 0x0, @empty, @private=0xa010102, {[@generic={0x86, 0x11, "8fe60f82c63d7874f77b872d9a999c"}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x81, [@loopback, @remote, @broadcast, @multicast1, @rand_addr=0x64010102, @multicast1, @empty]}, @timestamp_addr={0x44, 0x44, 0x14, 0x1, 0x4, [{@loopback, 0x2}, {@remote, 0x1}, {@multicast1, 0x7}, {@loopback, 0x846}, {@remote, 0x1}, {@remote, 0x80000000}, {@remote, 0xffff}, {@broadcast, 0x4}]}, @cipso={0x86, 0x4e, 0x2, [{0x5, 0xc, "732b579ff81157851e5f"}, {0x5, 0x7, "3e55da9dca"}, {0x6, 0x3, 'o'}, {0x1, 0x12, "9d0b363e366395caef260e24e0cdff92"}, {0x0, 0xe, "0a71bbfb423cff939dda205f"}, {0x7, 0x12, "89b5b51155b1ec555f91240fc79f4d23"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xff, 0x2, 0x8, @remote, @private2, 0x10, 0x7, 0x44}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000000a40)={0x92c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x7a}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc33}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6ed}}}]}}, {{0x8, 0x1, r13}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd73}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 21.526126216s ago: executing program 41 (id=3800): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x3}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x20) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x20000080) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0xef13dfe43f63670a, 0x700, 0x3, 0x6, {{0x37, 0x4, 0x0, 0x7, 0xdc, 0x68, 0x0, 0x9, 0x2f, 0x0, @empty, @private=0xa010102, {[@generic={0x86, 0x11, "8fe60f82c63d7874f77b872d9a999c"}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x81, [@loopback, @remote, @broadcast, @multicast1, @rand_addr=0x64010102, @multicast1, @empty]}, @timestamp_addr={0x44, 0x44, 0x14, 0x1, 0x4, [{@loopback, 0x2}, {@remote, 0x1}, {@multicast1, 0x7}, {@loopback, 0x846}, {@remote, 0x1}, {@remote, 0x80000000}, {@remote, 0xffff}, {@broadcast, 0x4}]}, @cipso={0x86, 0x4e, 0x2, [{0x5, 0xc, "732b579ff81157851e5f"}, {0x5, 0x7, "3e55da9dca"}, {0x6, 0x3, 'o'}, {0x1, 0x12, "9d0b363e366395caef260e24e0cdff92"}, {0x0, 0xe, "0a71bbfb423cff939dda205f"}, {0x7, 0x12, "89b5b51155b1ec555f91240fc79f4d23"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xff, 0x2, 0x8, @remote, @private2, 0x10, 0x7, 0x44}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000000a40)={0x92c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x7a}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc33}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6ed}}}]}}, {{0x8, 0x1, r13}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd73}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}]}, 0x92c}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 13.945584557s ago: executing program 0 (id=3933): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000014c0)={@multicast1, @empty}, 0x8) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000009e000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 13.941060468s ago: executing program 0 (id=3935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0xfffffffffffffffb) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r2, 0x329, 0xfffffffc, 0x1000000, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r5, &(0x7f00000004c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x453, 0x4, 0x70bd2b, 0x25dfdbfc, "e4"}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000300)={0x0, 0xfffffffffffffd76, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r10, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x24004014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 13.869076841s ago: executing program 0 (id=3939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000acbfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003e7ffff9400000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x101, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x1b0, 0x2b0, 0x1b0, 0x1b0, 0x388, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xcb, 0x0, @ipv6=@local, 0x4e24}}}, {{@ip={@rand_addr=0x64010102, @broadcast, 0xffffff00, 0xff, 'vlan1\x00', 'wg2\x00', {0xff}, {}, 0x0, 0x1, 0x18}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @multicast2, 0xffffffff, 0xffffffff, 'veth0_to_batadv\x00', 'ip6gretap0\x00', {}, {}, 0x33, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x446d69bd, @ipv6=@loopback, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x81, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) (async, rerun: 32) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000001240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x5, 0x6551fca36e13a7a4, @void}}}}}}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, 0x0, 0x1400c844) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xf94}, {0xc, 0x90, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x408d0) 13.868974911s ago: executing program 0 (id=3940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, &(0x7f0000000380)={{}, {0x0, 0x2710}}, &(0x7f00000003c0)) 13.868807481s ago: executing program 0 (id=3941): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x40600) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) unshare(0x40600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.impure\x00') (async) 13.858268111s ago: executing program 0 (id=3942): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 6.786445451s ago: executing program 3 (id=3955): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x13, 0x1}, &(0x7f0000000300)=0x0) timer_delete(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/59, 0xfdef}], 0x1}, 0x80) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="100000001b1401"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r7, r9, 0xfffffffffffffc01, 0x0) tee(r7, r9, 0x60000000000, 0x0) 6.733409754s ago: executing program 9 (id=3956): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x10, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = syz_usbip_server_init(0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x9, 0x0, 0x1, 0x400}, {0x1000}}, 0x30) 6.069170912s ago: executing program 9 (id=3959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000002c0)=[r3], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) 5.833021762s ago: executing program 3 (id=3961): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) close(r1) 5.564445254s ago: executing program 3 (id=3963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r4, &(0x7f0000000200)=""/202, 0xca) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2042, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x3, 0x0, 0x0, 0x8001}}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0) tkill(r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) 5.18839693s ago: executing program 9 (id=3964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000000c0)={"06f7344b716ac0cce077db39292a7994", 0x0, 0x0, {0x9, 0x8}, {0x1000000000000000, 0x1}, 0x9, [0x3, 0x3, 0x80000000, 0x6, 0x469, 0x100, 0xfd, 0x872, 0x6, 0x8, 0x4, 0x9, 0x1, 0x1, 0x3, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001000)={{r0}, r3, 0x2, @unused=[0x2, 0x5b, 0x949, 0x6], @name="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"}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") gettid() 4.963859649s ago: executing program 9 (id=3966): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000dbafc280100000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 4.71143494s ago: executing program 6 (id=3969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x2, 0x8, 0x1, 0x2, 0x3ff, 0x8, 0x7, {0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0xc31}}, 0x1ff, 0x6, 0x1, 0x8, 0x2}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x200000005c831, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000580)={0x77359400}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x6}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) 4.569106425s ago: executing program 6 (id=3971): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x3}, {0x3, 0x3}, {0xd, 0x3}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xff, 0x6, 0x5, 0x0, 0x1000, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair(0x18, 0x2, 0x0, &(0x7f0000000040)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) open(0x0, 0x4000, 0x100) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000003c0)='host1x_channel_submit\x00', r9}, 0x18) r10 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x4fff, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000740)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x3) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.323151481s ago: executing program 9 (id=3972): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000021d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80881, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket(0x840000000002, 0x3, 0xff) (async) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}], 0x1}}], 0x1, 0x4004040) (async) sendmmsg$inet(r5, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}], 0x1}}], 0x1, 0x4004040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x200, 0x0, 0x1, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x44855}, 0x4000054) 2.321068081s ago: executing program 3 (id=3973): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/7) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000180)) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0xfffe, 0x0, 0x0, 0x43}, {0x3, 0x0, 0x0, 0x20}, {}, {}, {}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x4, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 2.261195464s ago: executing program 3 (id=3974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x1000000000003}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x8}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40008) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x1800, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306011200000000000000000200000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 1.784618804s ago: executing program 6 (id=3975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1858e5603500800e000000000000000000110000", @ANYRES32=r0, @ANYBLOB="007eecee4a00000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000009513efe1aa4a52c2224ffbfa08ebd09082f0b59b62afe269861febaa7bd2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x3, 0x554, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000580)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000005c0)="d7cac954466b0c416b94cddfe6cd069ac28f5bcd84f1e9c39538c1574c4815df5f1189f42331cdaea1e71dac2c8f00c12442939112c38cd2f1dc8a580f6674a18cc2839c747c49fe8287ce5734951e926a9bcfe25788e0faf49516e722493b0ab092d1779cfdc00c03e3993d6f8c82fc7f5b3e8df183c99909a137f8c3f0a41b276149fcbb753ccf33472c07b642aff161c25942f32baf1bbcf453fe4cfd01331af154fc671e783118e0f77f6af7f568a36b5254f55d6a0cffed33", 0xbb}, {&(0x7f0000000680)="a2e470b63e9a3f844b45f9305e6f7c6d4eaf3a534583dc1058130c30586d8c4a6dce4c6e7834028a050cef99aa4482b116df278e84ca3f544bfa696be07a00dd38787c05abcc20e3500ab1d27b7ddfda52c6a5c95fa85192a200f0de712d71da3d44", 0x62}, {&(0x7f0000000780)="93bf5411be033b6061c37a52d4330cfbda728f4532f11b5d444646411d127916a6fc658ac56783ad1a93da713bd0f064b3ac9a37aeab020fa8b0f4d6c02b04a0b2d88a72d1", 0x45}, {&(0x7f0000000800)="161ee3cf90961a570df98158bc7a2a0344e9a69a5b159e2b65784f7ab92e18b6124fe307400f4f3cc4a159311bf2cd540584922da7fe9066047635f12b51b3b0ac7ff28c862892ee71457085daf11c4bbb6b4494957937f83cb0202d18619ddd5248cb98bf359f2e8071213d928931a11815a7265cf0b609ff3844d236461f1f3a18d79c2ff19c6a733dee5b958edf4f46a731947f66477a2e45111fb33d9fe9cc694bc176ec2461aaf969655b7848713e173b9c0248845e2f19", 0xba}, {&(0x7f0000000700)="32f59a73a9d390bf056ec3d5f7093fd40430769236b763f13ab29f9c", 0x1c}], 0x5, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8c}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x54, [@rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @multicast1]}, @ssrr={0x89, 0x1b, 0x63, [@multicast1, @rand_addr=0x64010102, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0xf}]}, @rr={0x7, 0x7, 0xc7, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x7, 0xd3, [@remote]}, @ssrr={0x89, 0xf, 0x79, [@private=0xa010101, @loopback, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x5, 0x1, 0x1, [{@multicast1, 0x37df}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x2}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfffffffc}, {@broadcast, 0x9}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x0, [{@remote, 0x10000}, {@rand_addr=0x64010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x618f}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc54c}]}, @generic={0x44, 0x9, "221501dc1d7615"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x148}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) getpgid(0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x3d, @buffer={0x42, 0x50, &(0x7f00000000c0)=""/80}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24008800) 1.675202258s ago: executing program 7 (id=3977): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x18) r3 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.667780379s ago: executing program 7 (id=3978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x80}, 0x18) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)) (rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r2, 0x2}}, 0x18) 1.221160668s ago: executing program 9 (id=3979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000003f01f0081000000ffff000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff000000001500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0xc0085504, 0x0) socket$netlink(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x36, 0x1) mount$nfs4(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x3201000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 856.277703ms ago: executing program 7 (id=3980): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="9553b01d227d5dc8f911f0159c500a58bd4d124a05860a684ffb25ab2c95a9c419755c538f026921f192bc0db984368a8442d1b11a9564b84272a749314650f113a42767557f264f6e8731448a2cda28ffc7759c8dd4a17763e883fcd512fbece191263a562fc68f17cc58864de373493d94108fe9368b31c8a0578fc4488414feba23abef948c07002843760d9656ce20283f24d3e436d20df717497384064a7311e6", @ANYRES64=0x0], 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}]}, 0x48}}, 0x4048000) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=@delchain={0x6b4, 0x65, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff2, 0x2}, {0xffe0, 0xd}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_RATE={0x6, 0x5, {0x50, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_u32={{0x8}, {0x224, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_SEL={0x1f4, 0x5, {0xe, 0x80, 0x40, 0x8, 0x6, 0x3, 0xade, 0xc, [{0x2, 0x51, 0x1, 0x6}, {0x0, 0x1ff, 0x7, 0x342c}, {0x9, 0x7, 0x7, 0x80000001}, {0xffffffff, 0x7f, 0x5, 0x9}, {0x3, 0xaf8, 0x1ff, 0x5}, {0xe424, 0x0, 0x80000000, 0x9}, {0x1ff, 0x0, 0x56d2, 0x7}, {0x81, 0x5, 0x40, 0x9}, {0xf, 0xffffff80, 0x80, 0xffffff00}, {0x6, 0x3, 0x1, 0x6}, {0xba54, 0x3, 0xc3e, 0x6}, {0x0, 0xfffffffb, 0x6, 0x10}, {0x6, 0x9, 0xd, 0x8}, {0xfffffffb, 0x2, 0x6db000, 0xfff}, {0x4, 0x101, 0x7, 0x5}, {0x5c3, 0x101, 0x7ff, 0x2}, {0x0, 0xa98, 0x3, 0x6}, {0x0, 0xe14e, 0xfffffffb, 0x7}, {0x8, 0x7, 0x10001, 0x9}, {0xffff, 0x6, 0x7, 0xfffff86a}, {0x80, 0x3ff, 0x6, 0x1ff}, {0x40, 0x8, 0x3, 0x7}, {0x5, 0x5, 0x0, 0x81}, {0x4, 0x1, 0xd034, 0x7}, {0x3, 0x6}, {0xfffffff3, 0x200, 0xbc, 0x200}, {0x1000000, 0x7fffffff, 0x0, 0x200}, {0x8418, 0x3, 0x5}, {0x1, 0xfff, 0x400, 0x4}, {0x6, 0xa, 0x3, 0x8}]}}, @TCA_U32_MARK={0x10, 0xa, {0x3, 0x8}}, @TCA_U32_INDEV={0x14, 0x8, 'pimreg0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0xad1f}, @TCA_RATE={0x6, 0x5, {0x2, 0x80}}, @filter_kind_options=@f_cgroup={{0xb}, {0x428, 0x2, [@TCA_CGROUP_POLICE={0x424, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfff, 0x4, 0x800, 0x6b, 0xa05a, 0x2, 0x4b8c1240, 0x2, 0x69fa, 0x0, 0x2, 0x7, 0x5, 0xfffffff2, 0x9, 0x1, 0xff, 0x7f, 0xffff, 0x10000, 0x7, 0x4, 0xffff338b, 0xdb1, 0x800, 0x9, 0x2a, 0x5, 0xfffffffe, 0x40, 0x5, 0x4, 0x3, 0x172, 0x9, 0x8, 0x80000000, 0x0, 0x3ff, 0x400, 0x80000001, 0xfffffffc, 0x9, 0x4, 0x4, 0x6, 0x1, 0x10000, 0x0, 0x1, 0x5, 0x74a1c10c, 0x8, 0x8, 0x9, 0x5, 0xc18, 0x7f, 0x5, 0x3, 0x9, 0xffffffd0, 0xfffffffb, 0x80, 0x6e, 0x1, 0x1800000, 0xd7, 0x5ce, 0x5, 0x2, 0xfffffff1, 0xffffffe6, 0x9ec, 0x611, 0x9, 0xf6, 0x6, 0x2493, 0xd, 0x5c1, 0x4, 0x9, 0x3, 0x7c5e, 0x2, 0x0, 0x6, 0x2, 0x0, 0x3, 0x7, 0x6, 0x1, 0x7, 0x7, 0x1, 0x1ff, 0x1, 0x6, 0x9, 0x7fff, 0x9, 0x9, 0x1, 0x2, 0x9, 0x7, 0x0, 0x8, 0x1, 0xd0, 0x2, 0x5, 0x0, 0x7f, 0xa, 0xe, 0xff, 0x3, 0xffff, 0xfffffff9, 0x8, 0x424, 0x800, 0x0, 0x3, 0xd, 0x10001, 0x8, 0x80000000, 0x2033, 0x81, 0x4, 0xfffffffb, 0x8, 0x200, 0x5, 0x800, 0x0, 0x8d3, 0xe9, 0x5, 0x9, 0xffffffff, 0x3, 0x0, 0xd, 0x10000, 0x2, 0xff, 0x3, 0x9, 0x10000, 0x0, 0x3, 0xd, 0xfffffff7, 0x1, 0x7509, 0x7, 0x2, 0x1, 0x9, 0x6, 0x2, 0x0, 0x8000, 0x6, 0x80, 0x1802c897, 0x5, 0xfffff6f6, 0x4, 0x80, 0x80000001, 0x7ff, 0x4, 0x5, 0x3, 0x61d, 0x0, 0x0, 0x0, 0xc, 0x7, 0x5, 0x800, 0x4, 0x5, 0xfffffff8, 0x7, 0x7f, 0xb, 0x4, 0x3, 0x1, 0x9, 0x8, 0xfffffff5, 0x8, 0x2, 0xfffefffe, 0xdc, 0xe3f, 0xdc, 0x30, 0x10000, 0x6, 0x14, 0x92c6, 0x3, 0x6, 0x100, 0x7, 0x2a, 0x3, 0x7c958b28, 0x1, 0x80, 0x9, 0xe6, 0x3, 0x1, 0x2, 0x3, 0x76, 0x3, 0x401, 0xc6, 0x77, 0x34b, 0x2fc00, 0x7, 0x2, 0x8001, 0x0, 0x1, 0x6, 0x9, 0x3ff, 0x7, 0xc0000000, 0x8, 0x9, 0x4, 0x1ff, 0x9, 0x1, 0xe8, 0x0, 0x3f1, 0xff, 0x1, 0x655]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r5, 0xffff8000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000300)) (async) ioctl$PPPIOCSMAXCID(r7, 0x40047451, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 32) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x120) (rerun: 32) ioctl$IOC_PR_REGISTER(r8, 0x401870c8, &(0x7f0000000340)={0xe, 0x6, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c69666163650000050005000a000000050004"], 0x68}}, 0x0) 593.237594ms ago: executing program 6 (id=3981): r0 = mq_open(&(0x7f0000000000)=',\x00', 0x1, 0x4, &(0x7f0000000040)={0x9, 0x5, 0x1, 0x5}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) mq_notify(r0, &(0x7f0000000080)={0x0, 0x18, 0x1, @tid=r1}) (async) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x5]}, 0x8, 0x800) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x8) (async) capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000140)={0x800, 0x1, 0x40004, 0x9, 0x4953}) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000340)=0x3) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="40c8fbe1c3503b3c6991a531d74b3d936b08786fd484024e42b30143c13d1b5525e4bfa8fc06a81bd1411ac0477a2f0d5b96017f4bbb749141fa561de35d8e991137bc03d2f22cbbc579ee5c6ffd1d915fec70a7084afc5bf7e5f29657080a974d93cc71ee5527a60416d17fe9751bbb248ab5592f4c6d8b362b6553076755a86a7950fa71fc7bff5b002174e91eee4b0a034843be98a987e311fd638f59951e6beb04359787de877380ef2cdf38f23738f8c10a538510f9bbde5f0520541463c340cad5335e72cb057b2590685acecdbba49cd81f", 0xd5}, {&(0x7f00000004c0)="9f99ff4f18977678e6fdb1a7db6b3af48cf32a680e5ef5eac60e94b200f16aff69377d5b37cfdfe615e5ac5b5d257494df7260c829e9d0beaca0932d4b0399ffcc2f82883cd43b247a8a6168be61adc85e070532ad910763bc9469e2667d59a1fd7e6b8d1f5cd14d4a542e0496fcfc0e8cdda24f06f813e44adc47f92f5c3a05c163c77a4159a10865d34d55ed688b64fa4a076ced656e614792e269d34aa8369035e48d0b52684093a6938cdc75aa0f727d260e22df36146be4251e3de1ca8ceab6497bbe08667b41695cb7", 0xcc}, {&(0x7f00000005c0)="d289054736a53f7150ca0082861048bb0ca59c246bc0808d67416ffa736f401385d16e52f8119e0a19d7a43798facee584beeb9050d092c173d90b9fe5b586ee2cfddb43c33d3e4d1afcf48e7d42dc01ec04f950d22b6591c0b0c3808ed1d87302bb214522ba9c6b256943a7ff15fe9de46114cbf7b4a45aa3c418059da84e74ee3594940d8e16980d2133257aa4f788d5c9b9542a53cd5e43a8305b2ed5026dc7229ca51056b3b97236165d60b7d5e650d968dd8e0976cd53ac46bd0a4a6a99a39667959fc57eec0c11de4221da", 0xce}, {&(0x7f00000006c0)="17fc8ec8aa08bb9446073ade6f7b657978abf62b083b60c3d69526df485007ec09c99b0a6cb179484b27e7f7106a9d8f05d912b878dc99c668b1116401acf4c5b77c9c9e3eafd7bee3967270db38efbf23771b0ee0db3bb1f1f6c92abfddcb49b036c15a5f67467593289fa99575ce4084e0607a6ebedecb76214e5d7d5f0dd23efb3ed21dd35cb906002a26042063756cf4252f0b1d9dcab872ced414e2d12ee01b266577ceff2e653319da5e87c9a35f87a434518371154861f1248a801b148734e3aca4058f7e0ad2da01e5", 0xcd}], 0x4}, 0x8000) (async, rerun: 64) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000840)={0x100000001, 0xfffffffffffffff7, 0x9, 0x9, 0xf72, 0xe}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x2f, 0xe, 0x4, 0x7, 0x4, @private2, @remote, 0x40, 0x40, 0x40bb, 0xdcc4}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000a40)={&(0x7f0000000880), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="922016544b6f"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10000000) r7 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r7) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000855}, 0x4) (async, rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000b80)=0x5) (rerun: 32) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000bc0)=0x19) (async, rerun: 32) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000c00)={0x2, 0x4, 0xbc56, 0x9, 0x9d, "c1ec4977d503dea41ce17218d85e8e739e4bf8", 0x2, 0xf6}) (async, rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r5, 0x104, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24040000) (async) r8 = pidfd_getfd(r2, r2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000000d40)=0x9, 0x4) fcntl$notify(r0, 0x402, 0x8) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) sendto(r9, &(0x7f0000000d80)="3b1fa32004e4302b780359f95805a3b588e2d4e45e99ede11a3458d8440667bbda20a7fdfd291da5099dcdbb72b2e6e2de745785550188ddbba1fc58a87d0e092039f01d43c9091afc5234464fd2c18a307b5fc50d", 0x55, 0x4008004, &(0x7f0000000e00)=@in={0x2, 0x4e24, @multicast1}, 0x80) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ec0), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r10, 0x104, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20002040}, 0x80) 525.155417ms ago: executing program 3 (id=3982): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000dbafc280100000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 520.329377ms ago: executing program 6 (id=3983): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0002000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf2501000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000080}, 0x8855) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) copy_file_range(r2, 0x0, r2, 0x0, 0x9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000580)=ANY=[], 0x0, 0xb47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfba, 0x10000000, 0x0, 0x8}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x20000377, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES8, @ANYRES32=r3], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', r6, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000200)={[{@dots}, {@dots}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {}, {@fat=@check_strict}, {@fat=@sys_immutable}, {@nodots}, {@fat=@showexec}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") syz_open_procfs(0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 473.29975ms ago: executing program 7 (id=3984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0xe703, 0x3, 0xffffffff, 0x1}, 0x5}) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') getdents64(r2, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x9c8}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="15976eff7fba7388323bb4a56ec1e26b68c9af1c21f65262b6a2fdd89b86842a98", 0x21}, {&(0x7f0000000280)="039211a32cbef2b3568dafc3cb2499dab214d206074c1ec2c03b2793479250cd9873427e2d050e956ded04e415c8a6da9a6d868d4e7f3d2c1960acf60f729f0b38933aa363d0dc49f10430c1a96420508f03162a3c9395d2f128e2d0a9fa4229d80f34cdfa536ab59ddb29fd21105854f5411ba4918c0b63674055901906ace81e7754c8107d1445702bebc3e3f27f35fe45532aebb91e0d2461a749b46d1fbfb6a887fc71950a04dc0ff2344ab6f4cb90a1caf242eb0fa54b1da4", 0xbb}, {&(0x7f00000004c0)="0f8724347b51a2031a55947bca6a4a078be3ecadceb731f8eb082cff5c69c8d47521ecae904d7c165acfa8d235a5e0947956f7405954535e0670f74417a0f36af0c386132c95375a4b4c00a7701cded7184fe03fed07d021724f3b227ae40f324cd0a462c09c06c7fd1567eabc7ef26b8d0cd89ae65bc973828ecb30093e77236874e225d8d12e5f70f7979be7e72c540f4d318b8a0652c75a88433598fb9e40783a5a660ed2879fe6061f4d01dcf595d84f9dcef1", 0xb5}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000580)="dd3bbb37a85e43600d652056a79617a917efe7047dd3d2c94d03b7f7cef648ff48a743236388c9977c7c26673a800ad5411a53bb99f0611968fa6db68266d63c596774e6a9ceb9ccd3a12baaff33bcef10471eb93120c5aaa527685351092618b30c327249537b727d0f3223eae9fe324b01b27c5c58203e11fd4b2dc29b611f7686b9b3ea68", 0x86}], 0x5, &(0x7f0000000640)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x5c, 0x5, '\x00', [@pad1, @pad1, @padn, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x80}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x89, 0x12, 0x1, 0x4, 0x0, [@mcast1, @loopback, @private0, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @remote, @local, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x130}, 0xc004) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x20000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 217.10716ms ago: executing program 6 (id=3985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000a4583900000000004b30ffec85000000500000009c0000000f00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xfffffffffffffff8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000060000000000000a2001000000b6332fd00073797a30000000007c000000090a01040000000000000000070000000800fb40000000000900020073797a30000000000900010073797a300000000008001a6ae3e673d3c69a3280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002808b2221ef1902a7080001400000000808000340000001100000000000000000000000000000b2ee07e7da895df6a781536ad95586a9b822a1f7000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x24044052}, 0x200508d0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x50) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) perf_event_open(0x0, r2, 0xe, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x89e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x9, 0x4240) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000300)={r5, 0x2, {0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x18, 0x14, "9e3676aca1b4d74a1fff0f85b0a03312477e1902055282e10839e8eaed067cf411c08b8de6745d4d03c176ed5b51eda84aad7659b184b994050c08ce78315f5d", "f77aeb0c5308265e42bc74981a3722144ac6700e5f79e96f636370cb83589285b0dbfd5bba195a7e299fcbf3f1d95f9ea38e8b025022e78d01c1f879dfea62a5", "a9f7634276ec62097a2409499315765442651764d421e27960fbe797c2235398", [0xfffffffffffffff7, 0x2000009]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x0, 0xf, {0x9, 0x21, 0xf0c, 0x1, 0x1, {0x22, 0x256}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x86}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x8, 0x3}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x1, 0x2, 0x9, 0x20, 0x5}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="050f05e800"], 0x1, [{0x0, 0x0}]}) fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x30020ce, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@dax_inode}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x561, &(0x7f0000001c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x79a, &(0x7f0000001480)="$eJzs3c1rHGUYAPBnNtmkTauJIGi9GBA0UJqYGlsFCxUPIlgo6Nl2SbahZpMt2U1pQkCLCF4EFQ+CXnry4Ee9efXjqv+FB7FUTYsVDxKZzWy7aXbTfG9sfj+Y5H3n3dlnnvl8d2eYDWDP6k//5CIORcQHSURvNj6JiHyt1Blxcul1txbmR9MhicXF1/5Iaq+5uTA/Gg3TpA5klUcj4od3Iw7nVsatzM5NFEql4nRWH6pOXhiqzM4dOT9ZGC+OF6eODY+MHD3+7PFjW5frXz/PHbz24ctPfX3yn3ceufr+j0mcjINZW2MeG3ZiebU/+rNlkk8X4TIvbTrY7pK0ewbYkHTX7Fjay+NQ9EZHrQQA3M/eiohFAGCPSZz/AWCPqX8PcHNhfrQ+tPcbiZ11/cWI2LeUf/365lJLZ3bNbl/tOmjPzWTZlZEkIvq2IH5/RHz27RtfpkNs1XVIgDV4+3JEnO3rX3n8T1bcs7BeT6/S1pX9779rfBrfFWjYGd+l/Z/nmvX/crf7P9Gk/9PdZN/diGb7/7IR+1ed/MRm41//POKFhnvbbjXkn+nryGoP1Pp8+eTc+VIxPbY9GBEDke9O68OrxBi48e+NFSMb8qr3//786M0v0vjp/zutud86u5dPOlaoFjaTc6PrlyMe60ya5J/cXv9Ji/7v6TXGeOX59z5t1Zau/zTf+rAy/8juTtoei1cinmy6/u/c0Zasen/iUG1zGKpvFE1888snPa3iN/b/0yGNX/8ssBPS9d+zev59SeP9mpWWb9XVquGnK73ft2q7d/7Nt/+u5PVlQS8VqtXp4Yiu5NWV44/emfZS4fGstPT6NP+BJ5rv/6tt/+lnwrMtF8Vyndd+/2rj+W+vNP+xda3/9Reu3proaBV/bet/pFYayMas5fi31hnczLIDAAAAAAAAAAAAAAAAAAAAAAAAgLXKRcTBSHKDt8u53ODg0m94Pxw9uVK5Uj18rjwzNRa138rui3yu/qjL3obnoQ5nz8Ov149mT+2s15+JiIci4uPu/Un9OYpjbc4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtPj9/9Sv3e2eOwBg2+xr9wwAADvO+R8A9h7nfwDYe9Z2/u/Y9vkAAHaOz/8AsPc4/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDNTp86lQ6Lfy/Mj6b1sYuzMxPli0fGipWJwcmZ0cHR8vSFwfFyebxUHBwtT97r/Url8oWRmJq5NFQtVqpDldm5M5PlmanqmfOThfHimWJ+R7ICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPWpzM5NFEql4vR9X+jKMt7E++TvHrO4C/JqLOQjoi3RO7KFuxsWwo4Xkt0xG1tcaONBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/5L8AAAD//5NXHCA=") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) recvmmsg(r6, 0x0, 0x0, 0x20, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 80.909746ms ago: executing program 7 (id=3986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x6, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @datasec={0xa, 0x8, 0x0, 0xf, 0x2, [{0x5, 0x80000000}, {0x5, 0x8, 0x6}, {0x1, 0x2, 0x800}, {0x1, 0x3, 0x4}, {0x1, 0x2, 0x2}, {0x3, 0x9, 0x7}, {0x4, 0x3, 0x2}, {0x3, 0x9, 0x932e}], "d58c"}, @const={0xa, 0x0, 0x0, 0xa, 0x1}, @const={0xa, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x61, 0x0, 0x5f]}}, &(0x7f0000002780)=""/4096, 0xb2, 0x1000, 0x1, 0x59, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xd365f000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) write$binfmt_misc(r4, &(0x7f0000000400), 0x2000011a) (async) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c96}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f0000001940)=[{&(0x7f0000000900)=""/219, 0xdb}, {&(0x7f00000006c0)=""/106, 0x6a}], 0x2, 0x3, 0x8) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) sendmsg$inet_sctp(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="6bdb9f", 0x3}], 0x1, &(0x7f0000000240)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x61df, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x32ae, 0x8, 0x0, 0x5, 0x40, 0x3, 0x9, 0x800}}], 0x50, 0x8001}, 0x44000) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9) 0s ago: executing program 7 (id=3987): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r3, 0x1, 0x0, 0x25dddbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) timer_create(0x2, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x38, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) kernel console output (not intermixed with test programs): ][T15090] __dump_stack+0x1d/0x30 [ 260.696876][T15090] dump_stack_lvl+0xe8/0x140 [ 260.696928][T15090] dump_stack+0x15/0x1b [ 260.696945][T15090] should_fail_ex+0x265/0x280 [ 260.696964][T15090] should_failslab+0x8c/0xb0 [ 260.697020][T15090] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 260.697049][T15090] ? v9fs_session_init+0x78/0xde0 [ 260.697079][T15090] kstrdup+0x3e/0xd0 [ 260.697102][T15090] v9fs_session_init+0x78/0xde0 [ 260.697156][T15090] ? __rcu_read_unlock+0x4f/0x70 [ 260.697180][T15090] ? avc_has_perm_noaudit+0x1b1/0x200 [ 260.697198][T15090] ? should_fail_ex+0xdb/0x280 [ 260.697216][T15090] ? v9fs_mount+0x51/0x5c0 [ 260.697234][T15090] ? should_failslab+0x8c/0xb0 [ 260.697301][T15090] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 260.697369][T15090] v9fs_mount+0x67/0x5c0 [ 260.697388][T15090] ? selinux_capable+0x31/0x40 [ 260.697407][T15090] ? __pfx_v9fs_mount+0x10/0x10 [ 260.697427][T15090] legacy_get_tree+0x78/0xd0 [ 260.697452][T15090] vfs_get_tree+0x57/0x1d0 [ 260.697513][T15090] do_new_mount+0x24d/0x660 [ 260.697541][T15090] ? security_capable+0x83/0x90 [ 260.697642][T15090] path_mount+0x4a5/0xb70 [ 260.697663][T15090] ? user_path_at+0x109/0x130 [ 260.697683][T15090] __se_sys_mount+0x28c/0x2e0 [ 260.697721][T15090] ? fput+0x8f/0xc0 [ 260.697740][T15090] __x64_sys_mount+0x67/0x80 [ 260.697763][T15090] x64_sys_call+0x2b51/0x3000 [ 260.697862][T15090] do_syscall_64+0xd2/0x200 [ 260.697881][T15090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 260.697906][T15090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 260.697980][T15090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.698010][T15090] RIP: 0033:0x7f5e9d12f749 [ 260.698026][T15090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.698043][T15090] RSP: 002b:00007f5e9bb8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.698062][T15090] RAX: ffffffffffffffda RBX: 00007f5e9d385fa0 RCX: 00007f5e9d12f749 [ 260.698075][T15090] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 260.698096][T15090] RBP: 00007f5e9bb8f090 R08: 0000200000000080 R09: 0000000000000000 [ 260.698108][T15090] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000002 [ 260.698128][T15090] R13: 00007f5e9d386038 R14: 00007f5e9d385fa0 R15: 00007ffd417ee2a8 [ 260.698148][T15090] [ 260.707430][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3283'. [ 260.756639][T15076] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3281: bg 0: block 217: padding at end of block bitmap is not set [ 260.865329][T15097] loop3: detected capacity change from 0 to 2048 [ 260.898608][T15100] loop2: detected capacity change from 0 to 8192 [ 260.930295][T15097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.946358][T15100] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 260.958089][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3287'. [ 260.960584][T15100] FAT-fs (loop2): Filesystem has been set read-only [ 261.035779][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.060564][T15100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3286'. [ 261.062292][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.098001][T15106] hub 9-0:1.0: USB hub found [ 261.103664][T15106] hub 9-0:1.0: 8 ports detected [ 261.140677][T15120] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 261.178387][T15130] FAULT_INJECTION: forcing a failure. [ 261.178387][T15130] name failslab, interval 1, probability 0, space 0, times 0 [ 261.191147][T15130] CPU: 1 UID: 0 PID: 15130 Comm: syz.9.3295 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 261.191176][T15130] Tainted: [W]=WARN [ 261.191181][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.191191][T15130] Call Trace: [ 261.191196][T15130] [ 261.191202][T15130] __dump_stack+0x1d/0x30 [ 261.191222][T15130] dump_stack_lvl+0xe8/0x140 [ 261.191239][T15130] dump_stack+0x15/0x1b [ 261.191319][T15130] should_fail_ex+0x265/0x280 [ 261.191350][T15130] ? p9_client_create+0x59/0xbc0 [ 261.191377][T15130] should_failslab+0x8c/0xb0 [ 261.191431][T15130] __kmalloc_cache_noprof+0x4c/0x4a0 [ 261.191467][T15130] p9_client_create+0x59/0xbc0 [ 261.191493][T15130] ? should_failslab+0x8c/0xb0 [ 261.191519][T15130] ? __kmalloc_node_track_caller_noprof+0x399/0x580 [ 261.191604][T15130] ? v9fs_session_init+0x78/0xde0 [ 261.191642][T15130] v9fs_session_init+0xf7/0xde0 [ 261.191670][T15130] ? avc_has_perm_noaudit+0x1b1/0x200 [ 261.191689][T15130] ? should_fail_ex+0xdb/0x280 [ 261.191707][T15130] ? v9fs_mount+0x51/0x5c0 [ 261.191792][T15130] ? should_failslab+0x8c/0xb0 [ 261.191818][T15130] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 261.191843][T15130] v9fs_mount+0x67/0x5c0 [ 261.191860][T15130] ? selinux_capable+0x31/0x40 [ 261.191929][T15130] ? __pfx_v9fs_mount+0x10/0x10 [ 261.191947][T15130] legacy_get_tree+0x78/0xd0 [ 261.191998][T15130] vfs_get_tree+0x57/0x1d0 [ 261.192033][T15130] do_new_mount+0x24d/0x660 [ 261.192053][T15130] ? security_capable+0x83/0x90 [ 261.192079][T15130] path_mount+0x4a5/0xb70 [ 261.192156][T15130] ? user_path_at+0x109/0x130 [ 261.192173][T15130] __se_sys_mount+0x28c/0x2e0 [ 261.192192][T15130] ? fput+0x8f/0xc0 [ 261.192211][T15130] __x64_sys_mount+0x67/0x80 [ 261.192345][T15130] x64_sys_call+0x2b51/0x3000 [ 261.192402][T15130] do_syscall_64+0xd2/0x200 [ 261.192422][T15130] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.192448][T15130] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 261.192528][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.192548][T15130] RIP: 0033:0x7fc5207ff749 [ 261.192657][T15130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.192671][T15130] RSP: 002b:00007fc51f25f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.192687][T15130] RAX: ffffffffffffffda RBX: 00007fc520a55fa0 RCX: 00007fc5207ff749 [ 261.192698][T15130] RDX: 00002000000006c0 RSI: 0000200000000680 RDI: 0000000000000000 [ 261.192709][T15130] RBP: 00007fc51f25f090 R08: 0000200000000080 R09: 0000000000000000 [ 261.192722][T15130] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000002 [ 261.192810][T15130] R13: 00007fc520a56038 R14: 00007fc520a55fa0 R15: 00007ffcb513c868 [ 261.192839][T15130] [ 261.194046][T15129] loop2: detected capacity change from 0 to 1764 [ 261.223445][T15135] loop9: detected capacity change from 0 to 512 [ 261.236219][ T1034] kernel write not supported for file [eventfd] (pid: 1034 comm: kworker/1:2) [ 261.271391][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3298'. [ 261.607081][T15166] loop3: detected capacity change from 0 to 8192 [ 261.643593][T15183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.651082][T15183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.724812][T15183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.732255][T15183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.761306][T15166] loop3: p2 p3 p4 [ 261.765315][T15166] loop3: p2 start 164919041 is beyond EOD, truncated [ 261.772077][T15166] loop3: p3 size 66846464 extends beyond EOD, truncated [ 261.824385][T15166] loop3: p4 size 37048832 extends beyond EOD, truncated [ 261.858780][T12757] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.211113][T15204] netlink: 'syz.3.3314': attribute type 10 has an invalid length. [ 262.219257][T15204] ipvlan0: entered allmulticast mode [ 262.224692][T15204] veth0_vlan: entered allmulticast mode [ 262.246770][T15204] team0: Device ipvlan0 failed to register rx_handler [ 262.392749][T15219] loop9: detected capacity change from 0 to 1024 [ 262.426350][T15219] EXT4-fs: test_dummy_encryption option not supported [ 262.472939][T15223] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.484579][T15223] macvlan2: entered promiscuous mode [ 262.489951][T15223] macvlan2: entered allmulticast mode [ 262.496223][T15223] bond3: (slave macvlan2): Opening slave failed [ 262.567561][T15239] syzkaller1: entered promiscuous mode [ 262.573299][T15239] syzkaller1: entered allmulticast mode [ 262.631371][T15246] No such timeout policy "syz0" [ 262.655352][T15248] loop2: detected capacity change from 0 to 1024 [ 262.662473][T15248] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 262.729932][T15253] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.790861][T15253] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.803017][T15265] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 262.882941][T15253] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.926450][T15284] loop9: detected capacity change from 0 to 512 [ 262.934364][T15284] EXT4-fs: Ignoring removed nobh option [ 262.955442][T15284] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.3337: corrupted inode contents [ 262.970052][T15284] EXT4-fs (loop9): Remounting filesystem read-only [ 262.977551][T15253] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.987584][T15284] EXT4-fs (loop9): 1 truncate cleaned up [ 262.995800][T15284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.008412][ T9871] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 263.018922][ T9871] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 263.066508][ T9871] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 263.077088][T15284] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.090692][T15299] FAULT_INJECTION: forcing a failure. [ 263.090692][T15299] name failslab, interval 1, probability 0, space 0, times 0 [ 263.103402][T15299] CPU: 0 UID: 0 PID: 15299 Comm: syz.6.3341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 263.103434][T15299] Tainted: [W]=WARN [ 263.103440][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.103486][T15299] Call Trace: [ 263.103557][T15299] [ 263.103563][T15299] __dump_stack+0x1d/0x30 [ 263.103648][T15299] dump_stack_lvl+0xe8/0x140 [ 263.103666][T15299] dump_stack+0x15/0x1b [ 263.103726][T15299] should_fail_ex+0x265/0x280 [ 263.103746][T15299] ? __pfx_sock_alloc_inode+0x10/0x10 [ 263.103780][T15299] should_failslab+0x8c/0xb0 [ 263.103803][T15299] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 263.103831][T15299] ? sock_alloc_inode+0x34/0xa0 [ 263.103895][T15299] ? __pfx_sock_alloc_inode+0x10/0x10 [ 263.103914][T15299] sock_alloc_inode+0x34/0xa0 [ 263.103933][T15299] alloc_inode+0x40/0x170 [ 263.103992][T15299] do_accept+0xa0/0x3a0 [ 263.104015][T15299] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.104120][T15299] __sys_accept4+0xbf/0x140 [ 263.104144][T15299] __x64_sys_accept4+0x51/0x60 [ 263.104216][T15299] x64_sys_call+0x2ee2/0x3000 [ 263.104238][T15299] do_syscall_64+0xd2/0x200 [ 263.104258][T15299] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 263.104327][T15299] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 263.104354][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.104373][T15299] RIP: 0033:0x7f3edcddf749 [ 263.104389][T15299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.104482][T15299] RSP: 002b:00007f3edb847038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 263.104499][T15299] RAX: ffffffffffffffda RBX: 00007f3edd035fa0 RCX: 00007f3edcddf749 [ 263.104511][T15299] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000000000000005 [ 263.104522][T15299] RBP: 00007f3edb847090 R08: 0000000000000000 R09: 0000000000000000 [ 263.104559][T15299] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 263.104570][T15299] R13: 00007f3edd036038 R14: 00007f3edd035fa0 R15: 00007ffebb7f95b8 [ 263.104590][T15299] [ 263.322022][ T9869] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.334104][ T9869] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.355591][ T9869] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.372213][ T9869] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.470333][T15313] bond1: option xmit_hash_policy: invalid value (8) [ 263.479441][T15313] bond1 (unregistering): Released all slaves [ 263.493309][T15325] loop2: detected capacity change from 0 to 1024 [ 263.503746][T15327] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.570456][T15325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.606838][T13313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.740730][T15368] 9pnet_fd: Insufficient options for proto=fd [ 263.763376][T15372] loop6: detected capacity change from 0 to 1024 [ 263.771525][T15372] EXT4-fs: inline encryption not supported [ 263.777692][T15372] EXT4-fs: Ignoring removed nobh option [ 263.781147][T15375] rdma_op ffff888102afad80 conn xmit_rdma 0000000000000000 [ 263.783402][T15372] EXT4-fs: Ignoring removed bh option [ 263.801303][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.809791][T15378] loop2: detected capacity change from 0 to 2048 [ 263.809947][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.820952][T15372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.827648][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.845129][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.853296][T15378] loop2: p1 p3 [ 263.856678][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.865501][T15372] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3364: Allocating blocks 497-513 which overlap fs metadata [ 263.865923][T15378] loop2: p3 start 8388352 is beyond EOD, truncated [ 263.886647][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.887151][T15372] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3364: Allocating blocks 497-513 which overlap fs metadata [ 263.924492][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.047435][T15411] loop2: detected capacity change from 0 to 764 [ 264.054804][T15411] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 264.065211][T15411] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.072681][T15411] vhci_hcd: invalid port number 96 [ 264.077809][T15411] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 264.085114][T15414] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.092567][T15414] vhci_hcd: invalid port number 96 [ 264.097665][T15414] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 264.241192][T15441] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 264.386633][T15450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15450 comm=syz.6.3386 [ 264.488641][T15452] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.511164][T15456] loop3: detected capacity change from 0 to 128 [ 264.593277][T15460] sd 0:0:1:0: device reset [ 264.654858][T15478] __nla_validate_parse: 31 callbacks suppressed [ 264.654872][T15478] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3393'. [ 264.671397][T15477] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3393'. [ 264.703309][T15481] loop3: detected capacity change from 0 to 512 [ 264.711086][T15481] EXT4-fs (loop3): can't read group descriptor 0 [ 264.947131][T15515] loop2: detected capacity change from 0 to 512 [ 265.659948][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 265.659962][ T29] audit: type=1400 audit(523.649:26503): avc: denied { getopt } for pid=15649 comm="syz.0.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.689859][ T29] audit: type=1400 audit(523.679:26504): avc: denied { setopt } for pid=15649 comm="syz.0.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.711179][ T29] audit: type=1400 audit(523.699:26505): avc: denied { read } for pid=15651 comm="syz.6.3406" path="socket:[191536]" dev="sockfs" ino=191536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.740945][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3407'. [ 265.761847][ T29] audit: type=1400 audit(523.749:26506): avc: denied { setopt } for pid=15651 comm="syz.6.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.794253][ T29] audit: type=1400 audit(523.769:26507): avc: denied { write } for pid=15651 comm="syz.6.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.964312][T15679] loop2: detected capacity change from 0 to 128 [ 265.971801][T15679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 265.979872][T15679] System zones: 1-3, 19-19, 35-36 [ 265.986628][T15679] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted [ 266.137767][T15685] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 266.146317][ T29] audit: type=1400 audit(524.129:26508): avc: denied { remount } for pid=15684 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 266.165741][ T29] audit: type=1400 audit(524.139:26509): avc: denied { name_connect } for pid=15684 comm="syz.3.3415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 266.186168][T13313] EXT4-fs unmount: 3 callbacks suppressed [ 266.186182][T13313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.213774][ T29] audit: type=1400 audit(524.199:26510): avc: denied { connect } for pid=15688 comm="syz.2.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.383941][ T29] audit: type=1400 audit(524.369:26511): avc: denied { write } for pid=15699 comm="syz.6.3420" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.385412][T15700] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3420'. [ 266.418916][T15700] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3420'. [ 266.439385][ T29] audit: type=1400 audit(524.429:26512): avc: denied { ioctl } for pid=15699 comm="syz.6.3420" path="/dev/ptp0" dev="devtmpfs" ino=245 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.775061][T15718] loop9: detected capacity change from 0 to 2048 [ 266.802273][T15718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.819786][T15718] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20004 [ 266.837075][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.909050][T15724] netlink: 'syz.9.3427': attribute type 1 has an invalid length. [ 266.941282][T15724] SELinux: Context system_u:object is not valid (left unmapped). [ 267.071315][T15727] loop3: detected capacity change from 0 to 512 [ 267.100037][T15727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.155362][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.253019][T15735] loop3: detected capacity change from 0 to 8192 [ 267.313514][T15735] loop3: p1 p2 p3 [ 267.313670][T15746] loop9: detected capacity change from 0 to 1024 [ 267.319218][T15735] loop3: p1 start 51379968 is beyond EOD, truncated [ 267.351517][T15735] loop3: p3 size 100663552 extends beyond EOD, truncated [ 267.359339][T15746] EXT4-fs: inline encryption not supported [ 267.365210][T15746] EXT4-fs: Ignoring removed orlov option [ 267.913189][T15746] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 268.070718][T15746] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 268.103997][T15746] System zones: 0-1, 3-12 [ 268.118285][T15745] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.138543][T15746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.285718][T15763] loop3: detected capacity change from 0 to 128 [ 268.329963][T15763] pim6reg: entered allmulticast mode [ 268.361303][T15763] pim6reg: left allmulticast mode [ 268.367361][T15765] netlink: get zone limit has 4 unknown bytes [ 268.384151][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3437'. [ 268.419183][T15766] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 268.425696][T15766] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.433271][T15766] vhci_hcd vhci_hcd.0: Device attached [ 268.531628][T15767] vhci_hcd: connection closed [ 268.531823][ T9848] vhci_hcd: stop threads [ 268.540841][ T9848] vhci_hcd: release socket [ 268.545246][ T9848] vhci_hcd: disconnect device [ 268.636953][T15779] can0: slcan on ptm0. [ 268.698336][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.781235][T15779] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.949760][T15792] loop9: detected capacity change from 0 to 128 [ 268.988947][T15779] can0 (unregistered): slcan off ptm0. [ 269.056479][T15781] loop2: detected capacity change from 0 to 256 [ 269.245746][T15815] sctp: [Deprecated]: syz.2.3449 (pid 15815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.245746][T15815] Use struct sctp_sack_info instead [ 269.325133][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3450'. [ 269.334640][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 269.346684][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 269.433513][T15825] macvlan2: entered promiscuous mode [ 269.463379][T15825] macvlan3: entered promiscuous mode [ 269.915299][T15843] loop9: detected capacity change from 0 to 128 [ 269.974955][T15843] pim6reg: entered allmulticast mode [ 269.984589][T15845] loop3: detected capacity change from 0 to 1024 [ 269.992633][T15843] pim6reg: left allmulticast mode [ 270.010651][T15845] EXT4-fs: inline encryption not supported [ 270.025312][T15845] EXT4-fs: Ignoring removed nobh option [ 270.052005][T15845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 270.068873][T15845] System zones: 1-12 [ 270.073811][T15845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.102423][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.169428][T15865] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 270.197994][T15870] loop3: detected capacity change from 0 to 128 [ 270.233332][T15879] FAULT_INJECTION: forcing a failure. [ 270.233332][T15879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.246447][T15879] CPU: 0 UID: 0 PID: 15879 Comm: syz.3.3467 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.246481][T15879] Tainted: [W]=WARN [ 270.246565][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.246577][T15879] Call Trace: [ 270.246583][T15879] [ 270.246591][T15879] __dump_stack+0x1d/0x30 [ 270.246639][T15879] dump_stack_lvl+0xe8/0x140 [ 270.246666][T15879] dump_stack+0x15/0x1b [ 270.246680][T15879] should_fail_ex+0x265/0x280 [ 270.246697][T15879] should_fail+0xb/0x20 [ 270.246712][T15879] should_fail_usercopy+0x1a/0x20 [ 270.246794][T15879] _copy_from_user+0x1c/0xb0 [ 270.246814][T15879] __sys_bpf+0x183/0x7c0 [ 270.246837][T15879] __x64_sys_bpf+0x41/0x50 [ 270.246864][T15879] x64_sys_call+0x2aee/0x3000 [ 270.246902][T15879] do_syscall_64+0xd2/0x200 [ 270.246920][T15879] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.247011][T15879] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 270.247122][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.247144][T15879] RIP: 0033:0x7f5e9d12f749 [ 270.247157][T15879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.247172][T15879] RSP: 002b:00007f5e9bb8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.247190][T15879] RAX: ffffffffffffffda RBX: 00007f5e9d385fa0 RCX: 00007f5e9d12f749 [ 270.247250][T15879] RDX: 0000000000000028 RSI: 0000200000000ac0 RDI: 0000000000000012 [ 270.247260][T15879] RBP: 00007f5e9bb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.247271][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.247281][T15879] R13: 00007f5e9d386038 R14: 00007f5e9d385fa0 R15: 00007ffd417ee2a8 [ 270.247298][T15879] [ 270.435388][T15869] loop9: detected capacity change from 0 to 512 [ 270.444038][T15869] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 270.453199][T15884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 270.464518][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3471'. [ 270.465329][T15885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3469'. [ 270.474575][T15887] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 270.502279][T15869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 270.510540][T15884] syzkaller0: entered promiscuous mode [ 270.519136][T15887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 270.520561][T15884] syzkaller0: entered allmulticast mode [ 270.571337][T15887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.589220][T15887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.678068][T15899] 9pnet_fd: Insufficient options for proto=fd [ 270.689966][T15899] hub 9-0:1.0: USB hub found [ 270.694682][T15899] hub 9-0:1.0: 8 ports detected [ 270.729323][T15902] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 270.729323][T15902] program syz.3.3474 not setting count and/or reply_len properly [ 270.788307][T15908] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3476'. [ 270.830655][T15912] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3477'. [ 270.842174][T15908] loop3: detected capacity change from 0 to 512 [ 270.869221][T15908] loop3: detected capacity change from 0 to 512 [ 270.882318][T15908] EXT4-fs (loop3): 1 orphan inode deleted [ 270.888380][T15908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.913268][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 270.913279][ T29] audit: type=1400 audit(528.899:26675): avc: denied { nlmsg_write } for pid=15916 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 270.967701][T15908] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.040843][ T29] audit: type=1400 audit(529.029:26676): avc: denied { create } for pid=15921 comm="syz.3.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 271.074492][T15924] SELinux: Context @ is not valid (left unmapped). [ 271.150842][T15923] ip6_vti0 speed is unknown, defaulting to 1000 [ 271.972139][T15947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3488'. [ 272.148568][ T29] audit: type=1400 audit(529.049:26677): avc: denied { sys_admin } for pid=15921 comm="syz.3.3481" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 272.153189][T15949] loop3: detected capacity change from 0 to 1024 [ 272.169142][ T29] audit: type=1400 audit(529.069:26678): avc: denied { relabelto } for pid=15916 comm="syz.0.3479" name="cgroup.controllers" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 272.199867][ T29] audit: type=1400 audit(529.069:26679): avc: denied { associate } for pid=15916 comm="syz.0.3479" name="cgroup.controllers" dev="tmpfs" ino=1620 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 272.225237][ T29] audit: type=1400 audit(529.209:26680): avc: denied { read } for pid=15929 comm="syz.2.3484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 272.244038][ T29] audit: type=1326 audit(529.289:26681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.6.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3edcddf749 code=0x7ffc0000 [ 272.247873][T15949] EXT4-fs: Ignoring removed bh option [ 272.267516][ T29] audit: type=1326 audit(529.289:26682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.6.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3edcddf749 code=0x7ffc0000 [ 272.295796][ T29] audit: type=1326 audit(529.289:26683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.6.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3edcddf749 code=0x7ffc0000 [ 272.318805][ T29] audit: type=1326 audit(529.289:26684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15922 comm="syz.6.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3edcddf749 code=0x7ffc0000 [ 272.351104][T15949] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 272.496857][T15949] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 272.588947][T15949] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3489: lblock 2 mapped to illegal pblock 2 (length 1) [ 272.643572][T15949] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3489: lblock 0 mapped to illegal pblock 48 (length 1) [ 272.699857][T15949] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3489: Failed to acquire dquot type 0 [ 272.785535][T15949] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 272.835858][T15949] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3489: mark_inode_dirty error [ 272.888768][T15949] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 272.968246][T15949] EXT4-fs (loop3): 1 orphan inode deleted [ 272.979536][ T9848] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 272.994267][ T9848] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 273.012995][T15949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.122150][T13459] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 273.122926][T15997] loop6: detected capacity change from 0 to 512 [ 273.153394][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 273.162913][T13459] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 273.176752][T15997] EXT4-fs: Ignoring removed oldalloc option [ 273.194674][T15997] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.217269][T13459] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 273.228118][T15997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.245452][T15997] EXT4-fs (loop6): orphan cleanup on readonly fs [ 273.279433][T15997] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3500: Failed to acquire dquot type 1 [ 273.309576][T15997] EXT4-fs (loop6): 1 truncate cleaned up [ 273.315939][T15997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.329078][T13459] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz-executor: mark_inode_dirty error [ 273.370789][ T9833] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm kworker/u8:18: Invalid inode table block 1 in block_group 0 [ 273.470585][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.500433][T13459] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 273.557074][T13459] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 273.592882][T16022] netlink: 'syz.2.3509': attribute type 1 has an invalid length. [ 273.608513][T13459] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 273.691054][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3512'. [ 273.932224][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3513'. [ 274.078619][T16042] netlink: 10 bytes leftover after parsing attributes in process `syz.9.3513'. [ 274.308751][T16041] loop3: detected capacity change from 0 to 128 [ 274.322680][T16041] syz.3.3504: attempt to access beyond end of device [ 274.322680][T16041] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 274.341165][T16041] syz.3.3504: attempt to access beyond end of device [ 274.341165][T16041] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 274.354568][T16041] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 274.379925][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.389814][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.397227][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.404638][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.412020][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.419455][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.426973][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.434465][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.441851][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.449281][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.456653][ T3537] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 274.837271][T16062] loop6: detected capacity change from 0 to 512 [ 274.870085][T16062] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 274.878025][T16062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 274.887433][T16062] System zones: 0-1, 15-15, 18-18, 34-34 [ 274.895292][T16062] EXT4-fs (loop6): orphan cleanup on readonly fs [ 274.920306][ T3537] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 274.972927][T16062] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 274.987578][T16062] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 274.996046][T16062] EXT4-fs (loop6): 1 truncate cleaned up [ 275.049429][T16062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.069613][T16074] loop9: detected capacity change from 0 to 1024 [ 275.098123][T16074] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.151387][T16062] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 275.159372][T16062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 275.169409][T16062] netlink: 'syz.6.3514': attribute type 10 has an invalid length. [ 275.177420][T16062] ipvlan0: entered allmulticast mode [ 275.182835][T16062] veth0_vlan: entered allmulticast mode [ 275.200079][T16062] team0: Device ipvlan0 failed to register rx_handler [ 275.223235][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.255316][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.278859][T16091] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(80) [ 275.285517][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.293045][T16091] vhci_hcd vhci_hcd.0: Device attached [ 275.301680][T16091] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(82) [ 275.308273][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.315873][T16091] vhci_hcd vhci_hcd.0: Device attached [ 275.325668][T16091] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(84) [ 275.332273][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 275.339947][T16091] vhci_hcd vhci_hcd.0: Device attached [ 275.346750][T16091] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(86) [ 275.353404][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.360943][T16091] vhci_hcd vhci_hcd.0: Device attached [ 275.370271][T16091] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(88) [ 275.374990][T16110] loop3: detected capacity change from 0 to 1024 [ 275.376865][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.384306][T16110] EXT4-fs: Ignoring removed orlov option [ 275.390712][T16091] vhci_hcd vhci_hcd.0: Device attached [ 275.403295][T16110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.406090][T16091] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(90) [ 275.422277][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.430042][T16091] vhci_hcd vhci_hcd.0: Device attached [ 275.447828][T16091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.456347][T16091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.465952][T16091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 275.475757][T16117] random: crng reseeded on system resumption [ 275.578726][ T3537] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 275.652937][T16127] loop2: detected capacity change from 0 to 128 [ 275.661238][T16127] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.683518][T16127] xt_hashlimit: size too large, truncated to 1048576 [ 275.830265][T16141] netlink: 'syz.0.3538': attribute type 21 has an invalid length. [ 275.878044][T13313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.921054][T16145] loop2: detected capacity change from 0 to 512 [ 275.990004][T16145] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 276.006298][T16115] vhci_hcd: connection closed [ 276.006391][ T9864] vhci_hcd: stop threads [ 276.010631][T16107] vhci_hcd: connection closed [ 276.011134][ T9864] vhci_hcd: release socket [ 276.015475][T16097] vhci_hcd: connection reset by peer [ 276.020059][ T9864] vhci_hcd: disconnect device [ 276.024722][T16099] vhci_hcd: connection closed [ 276.030359][T16104] vhci_hcd: connection closed [ 276.038775][T16145] EXT4-fs (loop2): orphan cleanup on readonly fs [ 276.039406][T16111] vhci_hcd: connection closed [ 276.057245][T16145] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3540: corrupted inode contents [ 276.078771][ T9864] vhci_hcd: stop threads [ 276.083089][ T9864] vhci_hcd: release socket [ 276.087514][ T9864] vhci_hcd: disconnect device [ 276.094778][T16145] EXT4-fs (loop2): Remounting filesystem read-only [ 276.101652][T16145] EXT4-fs (loop2): 1 truncate cleaned up [ 276.107433][ T9863] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 276.109355][ T9864] vhci_hcd: stop threads [ 276.117977][ T9863] __quota_error: 449 callbacks suppressed [ 276.117989][ T9863] Quota error (device loop2): write_blk: dquota write failed [ 276.122243][ T9864] vhci_hcd: release socket [ 276.127876][ T9863] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 276.135236][ T9864] vhci_hcd: disconnect device [ 276.154340][ T9863] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 276.164886][ T9863] Quota error (device loop2): write_blk: dquota write failed [ 276.172265][ T9863] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 276.185166][ T9863] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 276.191333][ T9864] vhci_hcd: stop threads [ 276.195299][ T9863] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 276.199541][ T9864] vhci_hcd: release socket [ 276.199556][ T9864] vhci_hcd: disconnect device [ 276.208423][ T9863] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 276.238871][T16145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.259259][ T9864] vhci_hcd: stop threads [ 276.263529][ T9864] vhci_hcd: release socket [ 276.268000][ T9864] vhci_hcd: disconnect device [ 276.278027][T13313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.291045][T16152] loop9: detected capacity change from 0 to 764 [ 276.304413][ T9864] vhci_hcd: stop threads [ 276.308729][ T9864] vhci_hcd: release socket [ 276.313137][ T9864] vhci_hcd: disconnect device [ 276.323865][T16152] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 276.345158][T16154] __nla_validate_parse: 4 callbacks suppressed [ 276.345205][T16154] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3543'. [ 276.361368][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3543'. [ 276.376201][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.398354][T16158] loop2: detected capacity change from 0 to 512 [ 276.415884][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 276.467945][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 276.520211][T16158] EXT4-fs (loop2): orphan cleanup on readonly fs [ 276.522776][T16171] 9pnet_fd: Insufficient options for proto=fd [ 276.527239][T16158] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3542: EA inode hash validation failed [ 276.554651][T16158] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 276.587887][T16158] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3542: corrupted inode contents [ 276.621383][T16176] loop3: detected capacity change from 0 to 2048 [ 276.627889][T16158] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.3542: mark_inode_dirty error [ 276.650591][ T29] audit: type=1400 audit(534.639:27128): avc: denied { bind } for pid=16177 comm="syz.6.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.679142][T16158] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3542: corrupted inode contents [ 276.713704][T16158] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3542: mark_inode_dirty error [ 276.749201][T16176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.765953][T16158] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3542: mark inode dirty (error -117) [ 276.814416][T16158] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 276.823724][ T29] audit: type=1400 audit(534.799:27129): avc: denied { mount } for pid=16177 comm="syz.6.3550" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 276.838777][T16158] EXT4-fs (loop2): 1 orphan inode deleted [ 276.851618][T16158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 276.883513][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.889048][ T29] audit: type=1400 audit(534.839:27130): avc: denied { unmount } for pid=16177 comm="syz.6.3550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 276.911711][ T29] audit: type=1400 audit(534.849:27131): avc: denied { unmount } for pid=8493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.121442][T16198] loop3: detected capacity change from 0 to 512 [ 277.128910][T16198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.159315][T16198] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3552: invalid indirect mapped block 4294967295 (level 0) [ 277.186604][T16198] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3552: invalid indirect mapped block 4294967295 (level 1) [ 277.201262][T16198] EXT4-fs (loop3): 1 orphan inode deleted [ 277.206979][T16198] EXT4-fs (loop3): 1 truncate cleaned up [ 277.213489][T16198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.227841][T16198] netlink: 'syz.3.3552': attribute type 32 has an invalid length. [ 277.235715][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3552'. [ 277.262204][T16198] bond1: option coupled_control: invalid value (128) [ 277.262677][T13313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.281448][T16198] bond1 (unregistering): Released all slaves [ 277.293659][T16215] netlink: 'syz.2.3557': attribute type 13 has an invalid length. [ 277.356213][T16223] loop6: detected capacity change from 0 to 128 [ 277.364070][T16223] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.376233][T16223] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.389085][T16223] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 277.397639][T16223] FAT-fs (loop6): Filesystem has been set read-only [ 277.405916][T16223] netlink: 'syz.6.3561': attribute type 12 has an invalid length. [ 277.423424][T16229] loop2: detected capacity change from 0 to 512 [ 277.431423][T16229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.442565][T16233] vlan2: entered allmulticast mode [ 277.449026][T16233] dummy0: entered allmulticast mode [ 277.506890][T16237] loop6: detected capacity change from 0 to 1024 [ 277.513684][T16237] EXT4-fs: inline encryption not supported [ 277.519611][T16237] EXT4-fs: Ignoring removed nobh option [ 277.529650][T16237] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 277.537768][T16237] System zones: 1-12 [ 277.543011][T16237] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.565379][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.605396][T16245] loop6: detected capacity change from 0 to 1024 [ 277.612626][T16245] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 277.623607][T16245] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 277.634134][T16245] JBD2: no valid journal superblock found [ 277.640054][T16245] EXT4-fs (loop6): Could not load journal inode [ 277.719010][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3571'. [ 278.085994][T16263] hub 9-0:1.0: USB hub found [ 278.158865][T16263] hub 9-0:1.0: 8 ports detected [ 278.279096][T16268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=16268 comm=syz.0.3576 [ 278.292159][T13313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.324979][T16268] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3576'. [ 278.442209][T16272] loop2: detected capacity change from 0 to 1024 [ 278.465339][T16272] EXT4-fs: inline encryption not supported [ 278.477535][T16272] EXT4-fs: Ignoring removed nobh option [ 278.706150][T16257] Set syz1 is full, maxelem 65536 reached [ 278.713067][T16272] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 278.721438][T16272] System zones: 1-12 [ 278.736769][T16272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.824067][T16276] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3578'. [ 278.872350][T13313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.917357][T16278] loop2: detected capacity change from 0 to 512 [ 278.925688][T16278] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3579: error while reading EA inode 32 err=-116 [ 278.938475][T16278] EXT4-fs (loop2): Remounting filesystem read-only [ 278.945187][T16278] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 278.958176][T16278] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 278.984077][T16278] EXT4-fs (loop2): 1 orphan inode deleted [ 278.996894][T16278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.024839][T16278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.081231][T16278] netlink: 24 bytes leftover after parsing attributes in process `--'. [ 279.112284][T16293] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3584'. [ 279.269161][T16301] loop6: detected capacity change from 0 to 512 [ 279.276098][T16301] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 279.416923][T16293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.428602][T16293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.446891][T16293] bond0 (unregistering): Released all slaves [ 279.452099][T16303] hub 9-0:1.0: USB hub found [ 279.457585][T16303] hub 9-0:1.0: 8 ports detected [ 279.464897][T16295] pim6reg: entered allmulticast mode [ 279.493903][T16307] loop9: detected capacity change from 0 to 512 [ 279.503209][T16307] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 279.514271][T16307] EXT4-fs (loop9): 1 truncate cleaned up [ 279.520785][T16307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.556397][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.570964][T16311] loop2: detected capacity change from 0 to 512 [ 279.581202][T16311] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 279.589116][T16311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 279.597191][T16311] System zones: 0-1, 15-15, 18-18, 34-34 [ 279.603362][T16311] EXT4-fs (loop2): orphan cleanup on readonly fs [ 279.609770][T16311] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 279.624379][T16311] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 279.631698][T16311] EXT4-fs (loop2): 1 truncate cleaned up [ 279.637871][T16311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.654718][T16311] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 279.662755][T16311] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 279.672517][T16311] netlink: 'syz.2.3589': attribute type 10 has an invalid length. [ 279.680585][T16311] ipvlan0: entered allmulticast mode [ 279.686234][T16311] veth0_vlan: entered allmulticast mode [ 279.693362][T16311] team0: Device ipvlan0 failed to register rx_handler [ 279.711743][T13313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.738390][T16329] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.775761][T16335] IPv6: Can't replace route, no match found [ 279.784859][T16335] xt_hashlimit: max too large, truncated to 1048576 [ 279.914062][T16343] hub 9-0:1.0: USB hub found [ 279.918795][T16343] hub 9-0:1.0: 8 ports detected [ 279.974430][T16347] loop2: detected capacity change from 0 to 8192 [ 280.100582][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.429584][T16383] loop3: detected capacity change from 0 to 512 [ 280.510798][T16381] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.658864][ T3537] usb 19-1: enqueue for inactive port 0 [ 280.686315][ T3537] usb 19-1: enqueue for inactive port 0 [ 280.695646][T16356] ip6_vti0 speed is unknown, defaulting to 1000 [ 280.795720][ T3537] vhci_hcd: vhci_device speed not set [ 281.002270][T16389] hub 9-0:1.0: USB hub found [ 281.051126][T16389] hub 9-0:1.0: 8 ports detected [ 281.225616][T16383] EXT4-fs (loop3): 1 orphan inode deleted [ 281.232335][T16383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.337369][T16412] program syz.0.3617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.347389][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 281.347400][ T29] audit: type=1400 audit(539.319:27256): avc: denied { append } for pid=16411 comm="syz.0.3617" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 281.455174][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.523176][ T29] audit: type=1326 audit(539.389:27257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.2.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aa7df749 code=0x7ffc0000 [ 281.546434][ T29] audit: type=1326 audit(539.389:27258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.2.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aa7df749 code=0x7ffc0000 [ 281.569517][ T29] audit: type=1326 audit(539.389:27259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.2.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98aa7df749 code=0x7ffc0000 [ 281.592508][ T29] audit: type=1326 audit(539.389:27260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.2.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aa7df749 code=0x7ffc0000 [ 281.615503][ T29] audit: type=1326 audit(539.389:27261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.2.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98aa7df749 code=0x7ffc0000 [ 281.638554][ T29] audit: type=1326 audit(539.389:27262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.2.3616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aa7df749 code=0x7ffc0000 [ 281.643712][T16421] __nla_validate_parse: 4 callbacks suppressed [ 281.643726][T16421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3619'. [ 281.838691][T16427] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 281.850818][ T29] audit: type=1326 audit(539.819:27263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9d12f749 code=0x7ffc0000 [ 281.873876][ T29] audit: type=1326 audit(539.819:27264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9d12f749 code=0x7ffc0000 [ 281.897042][ T29] audit: type=1326 audit(539.819:27265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16426 comm="syz.3.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f5e9d12f749 code=0x7ffc0000 [ 281.946044][T16430] loop2: detected capacity change from 0 to 512 [ 281.952660][T16431] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 281.990873][T16427] team0: Port device dummy0 added [ 282.033384][T16431] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 282.062098][T16434] loop2: detected capacity change from 0 to 512 [ 282.088902][T16432] loop3: detected capacity change from 0 to 1024 [ 282.097602][T16434] vhci_hcd: invalid port number 224 [ 282.120742][T16431] team0: Failed to send options change via netlink (err -105) [ 282.148579][T16431] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 282.178903][T16431] team0: Port device dummy0 removed [ 282.186113][T16431] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 282.279925][T16432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.433744][T16427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3621: missing EA_INODE flag [ 282.496027][T16427] EXT4-fs (loop3): Remounting filesystem read-only [ 282.582197][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.731306][T16452] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.764509][T16455] loop3: detected capacity change from 0 to 1024 [ 282.946088][T16457] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.700472][T16455] EXT4-fs: inline encryption not supported [ 283.718813][T16455] EXT4-fs: Ignoring removed nobh option [ 283.740314][T16455] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 283.808744][T16455] System zones: 1-12 [ 283.849738][T16455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.890480][T16466] loop2: detected capacity change from 0 to 164 [ 283.916303][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.970079][T16469] siw: device registration error -23 [ 284.007785][T16469] SELinux: Context system_u:object_r:modules_object_t:s0 is not valid (left unmapped). [ 284.056261][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3635'. [ 284.360163][T16476] loop9: detected capacity change from 0 to 2048 [ 284.420922][T16476] Alternate GPT is invalid, using primary GPT. [ 284.427297][T16476] loop9: p2 p3 p7 [ 284.485467][T16483] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.504462][T16485] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3638'. [ 284.563656][T16483] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.611490][T16494] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3641'. [ 284.614259][T16496] futex_wake_op: syz.6.3642 tries to shift op by 144; fix this program [ 284.663446][T16494] netlink: 'syz.9.3641': attribute type 1 has an invalid length. [ 284.671373][T16494] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3641'. [ 284.706066][T16483] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.755339][T16504] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3645'. [ 284.813655][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3647'. [ 284.814506][T16483] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.835402][T16504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3645'. [ 284.892144][ T3421] usb usb20-port1: attempt power cycle [ 285.005716][T16518] loop6: detected capacity change from 0 to 512 [ 285.014292][T16482] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.022393][T16518] FAT-fs (loop6): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 285.055333][ T9833] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.085129][ T9833] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.129871][ T9833] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.138133][T16513] ip6_vti0 speed is unknown, defaulting to 1000 [ 285.154175][ T9833] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.162663][T16524] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3651'. [ 285.186191][T16526] loop6: detected capacity change from 0 to 1024 [ 285.198088][T16529] loop9: detected capacity change from 0 to 512 [ 285.219099][T16529] ext4: Unknown parameter 'nouser_xattr' [ 285.235358][T16526] ext4: Unknown parameter '' [ 285.362253][T16541] loop9: detected capacity change from 0 to 128 [ 285.438285][T16557] netlink: 'syz.3.3657': attribute type 8 has an invalid length. [ 285.521939][T16568] loop3: detected capacity change from 0 to 512 [ 285.542254][T16568] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.569141][T16568] EXT4-fs (loop3): orphan cleanup on readonly fs [ 285.575499][T16568] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 285.593197][T16570] SELinux: security_context_str_to_sid (useW;t#tyH u6\&jR}) failed with errno=-22 [ 285.605607][T16568] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3666: attempt to clear invalid blocks 2 len 1 [ 285.635461][T16568] EXT4-fs (loop3): Remounting filesystem read-only [ 285.658932][T16568] EXT4-fs (loop3): 1 truncate cleaned up [ 285.703989][T16568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 285.719096][T16583] loop9: detected capacity change from 0 to 1024 [ 285.725815][T16583] EXT4-fs: inline encryption not supported [ 285.732533][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.770271][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.785983][T16568] netlink: 'syz.3.3666': attribute type 7 has an invalid length. [ 285.791941][T16583] EXT4-fs: Ignoring removed nobh option [ 285.793904][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3666'. [ 285.856405][T16583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 285.888206][T16583] System zones: 1-12 [ 285.894280][T16583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.895376][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.934419][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.961395][T16590] loop9: detected capacity change from 0 to 512 [ 285.988268][T16590] EXT4-fs: Ignoring removed bh option [ 285.994366][T16590] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 286.003811][T16590] EXT4-fs (loop9): 1 truncate cleaned up [ 286.010003][T16590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.158243][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.348806][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 286.348819][ T29] audit: type=1326 audit(544.329:27476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc5207ff7d7 code=0x7ffc0000 [ 286.378406][T16631] loop9: detected capacity change from 0 to 512 [ 286.396601][ T29] audit: type=1326 audit(544.359:27477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5207fdf90 code=0x7ffc0000 [ 286.398748][T16631] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 286.419612][ T29] audit: type=1326 audit(544.359:27478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5207ff34b code=0x7ffc0000 [ 286.452379][ T29] audit: type=1326 audit(544.379:27479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc5207fe3aa code=0x7ffc0000 [ 286.465108][T16638] netlink: 'syz.2.3685': attribute type 1 has an invalid length. [ 286.475169][ T29] audit: type=1326 audit(544.379:27480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc5207fe3aa code=0x7ffc0000 [ 286.495458][T16638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.505884][ T29] audit: type=1326 audit(544.379:27481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc5207fde97 code=0x7ffc0000 [ 286.535397][ T29] audit: type=1326 audit(544.379:27482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc520800eea code=0x7ffc0000 [ 286.560126][T16631] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 286.596532][T16631] EXT4-fs (loop9): 1 truncate cleaned up [ 286.609546][T16631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.639758][ T29] audit: type=1326 audit(544.629:27483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5207fdf90 code=0x7ffc0000 [ 286.640572][T16642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.662731][ T29] audit: type=1326 audit(544.629:27484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc5207fe497 code=0x7ffc0000 [ 286.694150][ T29] audit: type=1326 audit(544.629:27485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16630 comm="syz.9.3683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5207fdf90 code=0x7ffc0000 [ 286.736921][T16648] __nla_validate_parse: 3 callbacks suppressed [ 286.736935][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3686'. [ 286.779429][ T3421] usb usb20-port1: unable to enumerate USB device [ 286.817403][T16659] loop6: detected capacity change from 0 to 1024 [ 286.839708][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.844326][T16659] EXT4-fs: Ignoring removed orlov option [ 286.887435][T16664] loop3: detected capacity change from 0 to 1024 [ 286.895362][T16664] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 286.895806][T16659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.908578][T16664] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3694: lblock 2 mapped to illegal pblock 2 (length 1) [ 286.937808][T16664] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3694: lblock 0 mapped to illegal pblock 48 (length 1) [ 286.952844][T16664] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3694: Failed to acquire dquot type 0 [ 286.979111][T16664] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 287.015563][T16664] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3694: mark_inode_dirty error [ 287.026995][T16664] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 287.037379][T16664] EXT4-fs (loop3): 1 orphan inode deleted [ 287.043884][T16664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.056607][ T9863] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1) [ 287.071732][ T9863] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:46: Failed to release dquot type 0 [ 287.092221][T16664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.093883][T16681] netlink: 'syz.0.3697': attribute type 13 has an invalid length. [ 287.101634][T16664] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz.3.3694: Invalid inode table block 1 in block_group 0 [ 287.139004][T16664] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 287.153721][T16664] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz.3.3694: mark_inode_dirty error [ 287.254711][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.261929][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.345144][T16681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.378828][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.397400][T16693] netlink: 'syz.6.3699': attribute type 16 has an invalid length. [ 287.405403][T16693] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3699'. [ 287.420931][ T9860] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.429651][ T9860] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.437999][ T9860] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.447996][ T9860] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.547478][T16714] loop3: detected capacity change from 0 to 2048 [ 287.554348][T16716] loop2: detected capacity change from 0 to 512 [ 287.570734][T16716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.592924][T16716] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3707: corrupted inode contents [ 287.604816][T16717] loop6: detected capacity change from 0 to 512 [ 287.609081][T16716] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.3707: mark_inode_dirty error [ 287.611414][T16717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.623563][T16714] loop3: p1 < > p4 [ 287.629221][T16717] ext3: Unknown parameter 'permit_directio' [ 287.649103][T16716] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3707: corrupted inode contents [ 287.649293][T16714] loop3: p4 size 8388608 extends beyond EOD, truncated [ 287.671407][T16716] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3707: mark_inode_dirty error [ 287.677574][T16726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3709'. [ 287.703513][T16709] ip6_vti0 speed is unknown, defaulting to 1000 [ 287.781509][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 287.829692][T16741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3714'. [ 287.877601][T16752] loop3: detected capacity change from 0 to 2048 [ 287.884881][T16754] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 287.904879][T16758] loop2: detected capacity change from 0 to 512 [ 287.916142][T16758] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.937052][T16758] netlink: 'syz.2.3719': attribute type 2 has an invalid length. [ 287.944242][T16762] siw: device registration error -23 [ 287.944847][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 287.962780][T16752] Alternate GPT is invalid, using primary GPT. [ 287.969091][T16752] loop3: p1 p2 p3 [ 287.972881][T16752] loop3: partition table partially beyond EOD, truncated [ 288.024756][T16770] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 288.047719][T16779] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3726'. [ 288.059002][T16776] loop3: detected capacity change from 0 to 1024 [ 288.076736][T16776] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 288.087702][T16776] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 288.087960][T16760] loop6: detected capacity change from 0 to 128 [ 288.105914][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3726'. [ 288.136024][T16776] JBD2: no valid journal superblock found [ 288.138080][T16780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.141773][T16776] EXT4-fs (loop3): Could not load journal inode [ 288.292412][T16796] blktrace: Concurrent blktraces are not allowed on sg0 [ 288.551216][T16811] pim6reg: entered allmulticast mode [ 288.562146][T16811] loop9: detected capacity change from 0 to 1024 [ 288.569216][T16811] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 288.579906][T16811] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 288.592476][T16811] pim6reg: left allmulticast mode [ 288.841655][T16817] loop9: detected capacity change from 0 to 1024 [ 288.862909][T16817] EXT4-fs: inline encryption not supported [ 288.883271][T16817] EXT4-fs: Ignoring removed nobh option [ 288.907230][T16819] loop3: detected capacity change from 0 to 512 [ 288.922115][T16817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 288.944856][T16817] System zones: 1-12 [ 289.016608][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3742'. [ 289.055017][T16833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.073495][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3742'. [ 289.123028][T16839] bond4 (unregistering): Released all slaves [ 289.146756][T16841] loop3: detected capacity change from 0 to 128 [ 289.299615][T16855] pim6reg: entered allmulticast mode [ 289.329278][T16855] pim6reg: left allmulticast mode [ 289.908277][T16876] bridge_slave_1: left allmulticast mode [ 289.913996][T16876] bridge_slave_1: left promiscuous mode [ 289.919685][T16876] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.988909][T16876] bridge_slave_0: left allmulticast mode [ 289.994612][T16876] bridge_slave_0: left promiscuous mode [ 290.000320][T16876] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.086877][T16873] loop6: detected capacity change from 0 to 1024 [ 290.134110][T16873] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3754: Failed to acquire dquot type 0 [ 290.180017][T16873] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 290.235832][T16873] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3754: corrupted inode contents [ 290.308646][T16873] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.3754: mark_inode_dirty error [ 290.348838][T16873] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3754: corrupted inode contents [ 290.409073][T16873] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.3754: mark_inode_dirty error [ 290.448942][T16873] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3754: corrupted inode contents [ 290.488795][T16873] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 290.527935][T16873] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3754: corrupted inode contents [ 290.579084][T16873] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.3754: mark_inode_dirty error [ 290.620723][T16873] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 290.659310][T16873] EXT4-fs (loop6): 1 truncate cleaned up [ 290.774368][T16838] ip6_vti0 speed is unknown, defaulting to 1000 [ 291.064502][T16902] netlink: 'syz.0.3759': attribute type 1 has an invalid length. [ 291.124958][T16906] random: crng reseeded on system resumption [ 291.153570][T16912] loop2: detected capacity change from 0 to 512 [ 291.160132][T16902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.188296][T16912] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 291.196229][T16912] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 291.204955][T16916] netlink: 'syz.0.3764': attribute type 29 has an invalid length. [ 291.237882][T16916] netlink: 'syz.0.3764': attribute type 29 has an invalid length. [ 291.254417][T16912] System zones: 0-1, 15-15, 18-18, 34-34 [ 291.262332][T16916] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28695 sclass=netlink_xfrm_socket pid=16916 comm=syz.0.3764 [ 291.289437][T16919] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 291.333765][T16912] EXT4-fs (loop2): orphan cleanup on readonly fs [ 291.364309][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 291.364321][ T29] audit: type=1326 audit(549.349:27701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.368327][T16912] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 291.398731][ T29] audit: type=1326 audit(549.349:27702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.441653][T16912] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 291.456221][T16912] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 291.458726][ T29] audit: type=1326 audit(549.389:27703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.486385][ T29] audit: type=1326 audit(549.389:27704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.509612][ T29] audit: type=1326 audit(549.389:27705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.532565][ T29] audit: type=1326 audit(549.389:27706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.555494][T16912] EXT4-fs (loop2): 1 truncate cleaned up [ 291.555637][ T29] audit: type=1326 audit(549.389:27707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.584082][ T29] audit: type=1326 audit(549.389:27708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.606961][ T29] audit: type=1326 audit(549.389:27709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16914 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 291.613183][T16935] loop6: detected capacity change from 0 to 512 [ 291.801873][T16912] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 291.809798][T16912] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 292.166354][T16953] loop2: detected capacity change from 0 to 512 [ 292.193575][T16953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.234259][T16955] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 292.254126][T16953] EXT4-fs (loop2): 1 truncate cleaned up [ 292.382460][T16958] pim6reg: entered allmulticast mode [ 292.394385][T16958] pim6reg: left allmulticast mode [ 292.716310][T16964] SELinux: Context ׸X7dQYI{CpUhٻ r: is not valid (left unmapped). [ 292.750567][T16967] __nla_validate_parse: 4 callbacks suppressed [ 292.750578][T16967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3778'. [ 292.757340][T16969] netlink: '+}[@': attribute type 10 has an invalid length. [ 292.765804][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3778'. [ 292.803189][T16971] loop3: detected capacity change from 0 to 1024 [ 292.810370][T16971] EXT4-fs: inline encryption not supported [ 292.816208][T16971] EXT4-fs: Ignoring removed nobh option [ 292.829609][T16971] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 292.837779][T16971] System zones: 1-12 [ 292.860738][T16975] loop3: detected capacity change from 0 to 512 [ 292.869407][T16975] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 292.877311][T16975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 292.885779][T16975] System zones: 0-1, 15-15, 18-18, 34-34 [ 292.891695][T16975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 292.898189][T16975] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 292.912763][T16975] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 292.925106][T16975] EXT4-fs (loop3): 1 truncate cleaned up [ 292.930636][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3783'. [ 292.942688][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3783'. [ 292.956545][T16975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3781'. [ 292.972610][T16983] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 292.989817][T16975] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 292.997732][T16975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 293.020334][T16989] loop2: detected capacity change from 0 to 512 [ 293.027856][T16986] loop9: detected capacity change from 0 to 1024 [ 293.034795][T16986] EXT4-fs: Ignoring removed orlov option [ 293.041850][T16989] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 293.049972][T16989] EXT4-fs (loop2): orphan cleanup on readonly fs [ 293.057719][T16989] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.3786: corrupted inode contents [ 293.072696][T16989] EXT4-fs (loop2): Remounting filesystem read-only [ 293.095104][T16986] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 293.112707][T16989] EXT4-fs (loop2): 1 truncate cleaned up [ 293.118603][ T9860] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.129156][ T9860] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.141168][ T9860] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 293.154210][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3786'. [ 293.163660][T16989] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3786'. [ 293.185019][T16989] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 293.221166][T17009] loop6: detected capacity change from 0 to 1024 [ 293.241172][T17009] EXT4-fs: inline encryption not supported [ 293.247110][T17009] EXT4-fs: Ignoring removed nobh option [ 293.311688][T17009] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 293.319957][T17009] System zones: 1-12 [ 293.340845][T17021] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 293.350864][T17021] SELinux: failed to load policy [ 293.382971][T17023] loop3: detected capacity change from 0 to 512 [ 293.402538][T17023] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.3797: corrupted inode contents [ 293.414957][T17023] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.3797: mark_inode_dirty error [ 293.443907][T17023] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.3797: corrupted inode contents [ 293.473395][T17023] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.3797: mark_inode_dirty error [ 293.507983][T17029] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3797: corrupted xattr block 33: bad e_name length [ 293.537792][T17023] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3797: Failed to acquire dquot type 1 [ 293.562732][T17029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 293.576600][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'. [ 293.601921][T17033] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.3797: corrupted inode contents [ 293.617358][T17029] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3797: corrupted xattr block 33: bad e_name length [ 293.632174][T17033] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.3797: mark_inode_dirty error [ 293.643647][T17029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 293.652981][T17033] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.3797: corrupted inode contents [ 293.665194][T17029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 293.786372][T17026] ip6_vti0 speed is unknown, defaulting to 1000 [ 293.824524][T17050] loop3: detected capacity change from 0 to 1024 [ 293.833242][T17049] loop6: detected capacity change from 0 to 512 [ 293.901027][T17049] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 293.909042][T17049] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 293.925123][T17049] System zones: 0-1, 15-15, 18-18, 34-34 [ 293.931495][T17049] EXT4-fs (loop6): orphan cleanup on readonly fs [ 293.938016][T17049] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 293.952557][T17049] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 293.969709][T17068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.984048][T17069] loop3: detected capacity change from 0 to 1024 [ 293.991719][T17069] EXT4-fs: inline encryption not supported [ 293.997752][T17049] EXT4-fs (loop6): 1 truncate cleaned up [ 294.003489][T17069] EXT4-fs: Ignoring removed nobh option [ 294.022339][T17049] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3798'. [ 294.039881][T17069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 294.048047][T17069] System zones: 1-12 [ 294.053289][T17049] netlink: 'syz.6.3798': attribute type 10 has an invalid length. [ 294.062153][ T9833] bond1: left allmulticast mode [ 294.067010][ T9833] bond1: left promiscuous mode [ 294.071933][ T9833] bridge0: port 3(bond1) entered disabled state [ 294.088166][ T9833] bridge_slave_1: left allmulticast mode [ 294.093986][ T9833] bridge_slave_1: left promiscuous mode [ 294.099764][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.109142][ T9833] bridge_slave_0: left allmulticast mode [ 294.114797][ T9833] bridge_slave_0: left promiscuous mode [ 294.120458][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.142820][T17080] loop3: detected capacity change from 0 to 128 [ 294.211067][ T9833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.220609][ T9833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.229974][ T9833] bond0 (unregistering): Released all slaves [ 294.239311][ T9833] bond1 (unregistering): Released all slaves [ 294.248181][ T9833] bond2 (unregistering): Released all slaves [ 294.257071][T17034] ip6_vti0 speed is unknown, defaulting to 1000 [ 294.258801][T17049] team0: Device ipvlan0 failed to register rx_handler [ 294.485457][ T9833] hsr_slave_0: left promiscuous mode [ 294.501814][ T9833] hsr_slave_1: left promiscuous mode [ 294.512978][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.521512][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.529941][ T9833] pim6reg (unregistering): left allmulticast mode [ 294.574629][ T9833] team0 (unregistering): Port device team_slave_1 removed [ 294.599871][ T9833] team0 (unregistering): Port device team_slave_0 removed [ 294.664048][T17034] chnl_net:caif_netlink_parms(): no params data found [ 294.707686][T17034] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.714968][T17034] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.722205][T17034] bridge_slave_0: entered allmulticast mode [ 294.744947][T17034] bridge_slave_0: entered promiscuous mode [ 294.752437][T17034] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.759582][T17034] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.767090][T17034] bridge_slave_1: entered allmulticast mode [ 294.773721][T17034] bridge_slave_1: entered promiscuous mode [ 294.783751][T17104] loop6: detected capacity change from 0 to 128 [ 294.817479][T17034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.827625][T17103] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.840786][T17034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.862127][T17034] team0: Port device team_slave_0 added [ 294.871091][T17103] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.939744][T17034] team0: Port device team_slave_1 added [ 294.991156][T17034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.998179][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.024100][T17034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.045253][T17103] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.057272][T17034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.064261][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.090320][T17034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.125071][T17034] hsr_slave_0: entered promiscuous mode [ 295.132129][T17034] hsr_slave_1: entered promiscuous mode [ 295.138160][T17034] debugfs: 'hsr0' already exists in 'hsr' [ 295.143899][T17034] Cannot create hsr debugfs directory [ 295.150615][T17103] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.187314][T17112] loop6: detected capacity change from 0 to 512 [ 295.199190][T17112] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 295.210738][T17112] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 295.220848][T17112] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3820: Corrupt directory, running e2fsck is recommended [ 295.226317][T17124] netlink: 'syz.0.3823': attribute type 10 has an invalid length. [ 295.242310][T17124] ipvlan0: entered allmulticast mode [ 295.247595][T17124] veth0_vlan: entered allmulticast mode [ 295.275890][T17112] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 295.289092][T17112] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.3820: corrupted in-inode xattr: invalid ea_ino [ 295.303310][T17112] EXT4-fs (loop6): Remounting filesystem read-only [ 295.341172][ T9863] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.366861][ T9863] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.385301][ T9863] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.393954][T17135] netlink: 'syz.3.3825': attribute type 30 has an invalid length. [ 295.415892][ T9863] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.436919][T17141] loop6: detected capacity change from 0 to 512 [ 295.441151][T17143] loop9: detected capacity change from 0 to 512 [ 295.443829][T17141] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 295.463040][T17141] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3829: invalid indirect mapped block 4294967295 (level 0) [ 295.477289][T17141] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3829: invalid indirect mapped block 4294967295 (level 1) [ 295.533641][T17141] EXT4-fs (loop6): 1 orphan inode deleted [ 295.539494][T17141] EXT4-fs (loop6): 1 truncate cleaned up [ 295.793519][T17143] EXT4-fs error (device loop9): ext4_validate_block_bitmap:423: comm syz.9.3830: bg 0: bad block bitmap checksum [ 295.805921][T17034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.817418][T17034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.824163][T17143] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Filesystem failed CRC [ 295.839806][T17034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.864701][T17034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.940676][T17165] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.972303][T17034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.983247][T17034] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.994435][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.994469][ T9833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.995886][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.995916][ T9833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.156075][T17180] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.375349][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 296.375362][ T29] audit: type=1326 audit(554.359:28140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17187 comm="syz.0.3836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa299bcf749 code=0x7ffc0000 [ 296.412306][ T29] audit: type=1400 audit(554.389:28141): avc: denied { connect } for pid=17192 comm="syz.9.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.431923][ T29] audit: type=1400 audit(554.389:28142): avc: denied { write } for pid=17192 comm="syz.9.3844" path="socket:[196324]" dev="sockfs" ino=196324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.468971][ T29] audit: type=1400 audit(554.449:28143): avc: denied { checkpoint_restore } for pid=17195 comm="syz.0.3845" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 296.607069][T17034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.630604][T17217] loop6: detected capacity change from 0 to 1024 [ 296.648174][ T29] audit: type=1400 audit(554.629:28144): avc: denied { ioctl } for pid=17212 comm="syz.0.3849" path="socket:[196854]" dev="sockfs" ino=196854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.674588][T17217] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 296.684125][T17217] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 296.693800][T17217] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3846: Failed to acquire dquot type 0 [ 296.718377][T17217] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 296.734577][T17217] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3846: corrupted inode contents [ 296.754433][T17217] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.3846: mark_inode_dirty error [ 296.768333][T17217] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3846: corrupted inode contents [ 296.791768][ T29] audit: type=1400 audit(554.779:28145): avc: denied { create } for pid=17232 comm="syz.0.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 296.810963][ T29] audit: type=1400 audit(554.779:28146): avc: denied { write } for pid=17232 comm="syz.0.3851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 296.831771][T17034] veth0_vlan: entered promiscuous mode [ 296.837612][T17217] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.3846: mark_inode_dirty error [ 296.843045][T17034] veth1_vlan: entered promiscuous mode [ 296.856397][T17217] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3846: corrupted inode contents [ 296.878426][T17034] veth0_macvtap: entered promiscuous mode [ 296.886484][T17034] veth1_macvtap: entered promiscuous mode [ 296.900816][T17034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.910020][T17217] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 296.918821][T17217] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.3846: corrupted inode contents [ 296.931971][T17217] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.3846: mark_inode_dirty error [ 296.943756][T17217] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 296.955252][T17034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.965116][T17217] EXT4-fs (loop6): 1 truncate cleaned up [ 296.988309][ T9828] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.997625][ T9828] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.012805][T17217] EXT4-fs mount: 43 callbacks suppressed [ 297.012819][T17217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.041443][ T9828] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.063320][ T9828] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.110971][T17243] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.132729][ T29] audit: type=1400 audit(555.119:28147): avc: denied { mounton } for pid=17034 comm="syz-executor" path="/root/syzkaller.uJxFT8/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 297.187755][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.336431][T17261] veth1_to_bond: entered allmulticast mode [ 297.371221][T17265] loop3: detected capacity change from 0 to 512 [ 297.381535][T17265] ext4: Unknown parameter 'fsmagic' [ 297.389802][T17261] veth1_to_bond (unregistering): left allmulticast mode [ 297.467678][T17275] bridge3: entered promiscuous mode [ 297.544439][T17273] loop7: detected capacity change from 0 to 1024 [ 297.561950][T17273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.617195][T17293] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 297.632665][T17034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.785315][T17313] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 297.791932][T17313] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 297.799597][T17313] vhci_hcd vhci_hcd.0: Device attached [ 297.806213][T17314] vhci_hcd: connection closed [ 297.806291][ T9828] vhci_hcd: stop threads [ 297.815579][ T9828] vhci_hcd: release socket [ 297.820069][ T9828] vhci_hcd: disconnect device [ 297.882312][T17311] netlink: '+}[@': attribute type 10 has an invalid length. [ 297.893042][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.901179][T17311] bond0: (slave team0): Enslaving as an active interface with an up link [ 298.079857][T17326] __nla_validate_parse: 11 callbacks suppressed [ 298.079872][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3877'. [ 298.157917][T17331] loop3: detected capacity change from 0 to 512 [ 298.165208][T17331] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.172439][T17331] ext4: Unknown parameter 'dioread_nolock2fowner<00000000000000000000' [ 298.219316][T17340] loop6: detected capacity change from 0 to 1024 [ 298.225914][T17340] EXT4-fs: inline encryption not supported [ 298.232126][T17340] EXT4-fs: Ignoring removed nobh option [ 298.260463][T17340] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 298.268715][T17340] System zones: 1-12 [ 298.273306][T17340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.296898][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.310425][T17345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3883'. [ 298.341900][T17350] loop3: detected capacity change from 0 to 512 [ 298.376455][T17348] loop6: detected capacity change from 0 to 8192 [ 298.534115][T17356] loop3: detected capacity change from 0 to 8192 [ 298.589929][T17356] loop3: p1 p3 p4 [ 298.594667][T17356] loop3: p1 start 393217 is beyond EOD, truncated [ 298.601199][T17356] loop3: p3 size 395700 extends beyond EOD, truncated [ 298.614358][T17356] loop3: p4 start 117571584 is beyond EOD, truncated [ 298.820067][T17379] loop6: detected capacity change from 0 to 1024 [ 298.826970][T17379] EXT4-fs: inline encryption not supported [ 298.833248][T17379] EXT4-fs: Ignoring removed nobh option [ 298.859694][T17379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 298.868885][T17379] System zones: 1-12 [ 298.872480][T17388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3896'. [ 298.882091][T17388] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3896'. [ 298.884549][T17379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.891468][T17388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3896'. [ 298.912811][T17387] loop9: detected capacity change from 0 to 256 [ 298.919584][T17387] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.919936][T17388] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3896'. [ 298.939120][T17388] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3896'. [ 298.968527][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.023698][T17393] loop9: detected capacity change from 0 to 8192 [ 299.050123][T17396] loop6: detected capacity change from 0 to 732 [ 299.057928][T17396] iso9660: Unknown parameter '01777777777777777777777' [ 299.105097][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3898'. [ 299.145003][T17396] team0 (unregistering): Port device team_slave_0 removed [ 299.176463][T17396] team0 (unregistering): Port device team_slave_1 removed [ 299.335058][T17399] loop3: detected capacity change from 0 to 8192 [ 299.354061][T17401] loop6: detected capacity change from 0 to 1764 [ 299.367785][T17401] random: crng reseeded on system resumption [ 299.481335][T17408] 9pnet_fd: Insufficient options for proto=fd [ 299.484577][T17417] loop3: detected capacity change from 0 to 512 [ 299.494747][T17408] kernel profiling enabled (shift: 17) [ 299.496229][T17417] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 299.519147][T17408] loop6: detected capacity change from 0 to 2048 [ 299.549197][T17408] loop6: p1 < > p4 [ 299.553380][T17429] loop9: detected capacity change from 0 to 1024 [ 299.553716][T17408] loop6: p4 size 8388608 extends beyond EOD, truncated [ 299.560640][T17429] EXT4-fs: inline encryption not supported [ 299.573285][T17429] EXT4-fs: Ignoring removed nobh option [ 299.593178][T17429] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 299.601404][T17429] System zones: 1-12 [ 299.605894][T17429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.620799][T17434] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3910'. [ 299.639228][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.705977][T17440] loop9: detected capacity change from 0 to 8192 [ 299.791577][T17447] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 299.904753][T17450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.939380][T17452] bridge0: port 1(vlan1) entered blocking state [ 299.945712][T17452] bridge0: port 1(vlan1) entered disabled state [ 299.952249][T17452] vlan1: entered allmulticast mode [ 299.957353][T17452] bridge0: entered allmulticast mode [ 299.963142][T17452] vlan1: left allmulticast mode [ 299.968015][T17452] bridge0: left allmulticast mode [ 300.072975][T17462] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 300.125380][T17466] loop6: detected capacity change from 0 to 1024 [ 300.132555][T17466] EXT4-fs: inline encryption not supported [ 300.138534][T17466] EXT4-fs: Ignoring removed nobh option [ 300.149887][T17466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 300.158016][T17466] System zones: 1-12 [ 300.162513][T17466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.184648][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.204972][T17471] vlan1: entered promiscuous mode [ 300.210045][T17471] macvtap0: entered promiscuous mode [ 300.730784][T17483] wireguard0: entered promiscuous mode [ 300.736361][T17483] wireguard0: entered allmulticast mode [ 302.802737][T17548] loop9: detected capacity change from 0 to 512 [ 303.485091][T17548] EXT4-fs (loop9): can't read group descriptor 0 [ 305.473272][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 305.473284][ T29] audit: type=1326 audit(563.459:28453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.508916][ T29] audit: type=1326 audit(563.489:28454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.532021][ T29] audit: type=1326 audit(563.489:28455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.555345][ T29] audit: type=1326 audit(563.489:28456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.578243][ T29] audit: type=1326 audit(563.489:28457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.601244][ T29] audit: type=1326 audit(563.489:28458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.624210][ T29] audit: type=1326 audit(563.489:28459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.647212][ T29] audit: type=1326 audit(563.489:28460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.670172][ T29] audit: type=1326 audit(563.489:28461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 305.693061][ T29] audit: type=1326 audit(563.489:28462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.9.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 306.773095][T17564] loop6: detected capacity change from 0 to 512 [ 306.790828][T17564] EXT4-fs (loop6): orphan cleanup on readonly fs [ 306.797816][T17564] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3953: EA inode hash validation failed [ 306.868987][T17564] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 307.967301][T17564] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.3953: corrupted inode contents [ 308.182186][T17564] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.3953: mark_inode_dirty error [ 308.195304][T17616] loop7: detected capacity change from 0 to 1024 [ 308.209266][T17616] EXT4-fs: inline encryption not supported [ 308.219580][T17564] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.3953: corrupted inode contents [ 308.236942][T17616] EXT4-fs: Ignoring removed nobh option [ 308.264300][T17564] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.3953: mark_inode_dirty error [ 308.279192][T17616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 308.291043][T17622] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 308.297549][T17622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 308.305131][T17622] vhci_hcd vhci_hcd.0: Device attached [ 308.311136][T17616] System zones: 1-12 [ 308.315228][T17564] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.3953: mark inode dirty (error -117) [ 308.335262][T17616] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.348225][T17564] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 308.363354][T17623] vhci_hcd: connection closed [ 308.363715][ T9853] vhci_hcd: stop threads [ 308.372813][ T9853] vhci_hcd: release socket [ 308.377286][ T9853] vhci_hcd: disconnect device [ 308.384114][T17564] EXT4-fs (loop6): 1 orphan inode deleted [ 308.402028][T17564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 308.422311][T17034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.733045][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.879915][T17633] loop7: detected capacity change from 0 to 1024 [ 308.900193][T17633] EXT4-fs: inline encryption not supported [ 308.922268][T17633] EXT4-fs: Ignoring removed nobh option [ 308.940961][T17633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002] [ 308.968589][T17633] System zones: 1-12 [ 308.987866][T17633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.125995][T17034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.217202][T17642] FAULT_INJECTION: forcing a failure. [ 309.217202][T17642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.230429][T17642] CPU: 1 UID: 0 PID: 17642 Comm: syz.7.3960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 309.230462][T17642] Tainted: [W]=WARN [ 309.230468][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.230541][T17642] Call Trace: [ 309.230547][T17642] [ 309.230555][T17642] __dump_stack+0x1d/0x30 [ 309.230577][T17642] dump_stack_lvl+0xe8/0x140 [ 309.230595][T17642] dump_stack+0x15/0x1b [ 309.230613][T17642] should_fail_ex+0x265/0x280 [ 309.230631][T17642] should_fail+0xb/0x20 [ 309.230713][T17642] should_fail_usercopy+0x1a/0x20 [ 309.230734][T17642] _copy_from_user+0x1c/0xb0 [ 309.230816][T17642] __sys_bpf+0x183/0x7c0 [ 309.230843][T17642] __x64_sys_bpf+0x41/0x50 [ 309.230880][T17642] x64_sys_call+0x2aee/0x3000 [ 309.230915][T17642] do_syscall_64+0xd2/0x200 [ 309.230988][T17642] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 309.231091][T17642] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 309.231122][T17642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.231143][T17642] RIP: 0033:0x7f6fa063f749 [ 309.231225][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.231281][T17642] RSP: 002b:00007f6f9f0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.231299][T17642] RAX: ffffffffffffffda RBX: 00007f6fa0895fa0 RCX: 00007f6fa063f749 [ 309.231311][T17642] RDX: 0000000000000028 RSI: 0000200000000ac0 RDI: 0000000000000012 [ 309.231322][T17642] RBP: 00007f6f9f0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.231334][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.231345][T17642] R13: 00007f6fa0896038 R14: 00007f6fa0895fa0 R15: 00007fffd47efce8 [ 309.231366][T17642] [ 309.466893][T17648] loop7: detected capacity change from 0 to 128 [ 309.661267][T17649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.686805][T17649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.807085][T17653] loop9: detected capacity change from 0 to 512 [ 309.820049][T17653] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 309.828191][T17653] EXT4-fs (loop9): orphan cleanup on readonly fs [ 309.835151][T17653] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 309.851715][T17653] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 309.887719][T17653] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3964: bg 0: block 40: padding at end of block bitmap is not set [ 309.954617][T17653] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 309.981536][T17653] EXT4-fs (loop9): 1 truncate cleaned up [ 309.996190][T17653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.060396][ T8493] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.200484][T17664] loop9: detected capacity change from 0 to 8192 [ 310.332022][T17668] SELinux: policydb version -1411311999 does not match my version range 15-35 [ 310.350034][T17671] sctp: [Deprecated]: syz.6.3969 (pid 17671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.350034][T17671] Use struct sctp_sack_info instead [ 310.376931][T17668] SELinux: failed to load policy [ 310.585446][T17677] loop7: detected capacity change from 0 to 512 [ 311.461428][T17677] EXT4-fs error (device loop7): ext4_init_orphan_info:581: comm syz.7.3970: inode #0: comm syz.7.3970: iget: illegal inode # [ 311.641842][T17677] EXT4-fs (loop7): get orphan inode failed [ 311.654345][T17677] EXT4-fs (loop7): mount failed [ 312.973003][T17678] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.049514][T17684] loop3: detected capacity change from 0 to 1024 [ 313.277945][T17687] loop6: detected capacity change from 0 to 512 [ 313.326330][T17694] random: crng reseeded on system resumption [ 313.357719][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.366104][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.377700][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.384970][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.392156][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.399469][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.406883][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.414370][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.421748][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.513845][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.529738][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.571820][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.584177][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.601280][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.610223][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.618594][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.649936][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.657199][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.678351][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.692936][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.711689][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.726721][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.744315][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.759762][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.772081][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.789325][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.803266][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 313.803277][ T29] audit: type=1326 audit(571.789:28549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 313.837685][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.852018][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.869407][T17697] 9pnet_fd: Insufficient options for proto=fd [ 313.876286][ T29] audit: type=1326 audit(571.819:28550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 313.899404][ T29] audit: type=1326 audit(571.819:28551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 313.922445][ T29] audit: type=1326 audit(571.819:28552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 313.945495][ T29] audit: type=1326 audit(571.829:28553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 313.968551][ T29] audit: type=1326 audit(571.829:28554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 313.991563][ T29] audit: type=1326 audit(571.829:28555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 314.014585][ T29] audit: type=1326 audit(571.829:28556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 314.037771][ T29] audit: type=1326 audit(571.829:28557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 314.060886][ T29] audit: type=1326 audit(571.829:28558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.9.3979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5207ff749 code=0x7ffc0000 [ 314.098201][T17697] 9pnet_fd: Insufficient options for proto=fd [ 314.111298][T17697] 9pnet_fd: Insufficient options for proto=fd [ 314.126714][T17697] 9pnet_fd: Insufficient options for proto=fd [ 314.138000][T17697] 9pnet_fd: Insufficient options for proto=fd [ 314.220299][T17687] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 314.228228][T17687] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 314.239477][T17684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 314.252485][T17687] System zones: 0-1, 15-15, 18-18, 34-34 [ 314.258488][T17687] EXT4-fs (loop6): orphan cleanup on readonly fs [ 314.265418][T17687] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 314.280237][T17687] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 314.287876][T17684] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3974: corrupted xattr block 128: invalid ea_ino [ 314.301473][T17684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 314.312183][T17687] EXT4-fs (loop6): 1 truncate cleaned up [ 314.318205][T17687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.330753][T17684] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3974: corrupted xattr block 128: invalid ea_ino [ 314.344733][T17684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 314.355982][T17687] __nla_validate_parse: 5 callbacks suppressed [ 314.355995][T17687] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3975'. [ 314.379860][T17684] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3974: corrupted xattr block 128: invalid ea_ino [ 314.395690][T17687] netlink: 'syz.6.3975': attribute type 10 has an invalid length. [ 314.405535][T17684] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 314.429978][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.457483][T13459] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 314.524031][T17721] loop6: detected capacity change from 0 to 256 [ 314.592955][T17724] IPv6: Can't replace route, no match found [ 314.601378][T17723] loop7: detected capacity change from 0 to 512 [ 314.690290][T17717] loop3: detected capacity change from 0 to 8192 [ 314.698373][T17723] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.3984: iget: bad extra_isize 90 (inode size 256) [ 314.784315][T17723] EXT4-fs (loop7): Remounting filesystem read-only [ 314.809332][T17723] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -30) [ 314.858177][T17723] EXT4-fs (loop7): 1 orphan inode deleted [ 314.872334][T17723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.942226][T17034] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.952979][T17727] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 314.969383][T17727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.000795][T17729] ================================================================== [ 315.000836][T17727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.008871][T17729] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 315.023640][T17729] [ 315.025956][T17729] read-write to 0xffff88811c3d9348 of 1 bytes by task 17717 on cpu 1: [ 315.034101][T17729] fat12_ent_put+0xc4/0x170 [ 315.038611][T17729] fat_ent_write+0x6c/0xe0 [ 315.043025][T17729] fat_chain_add+0x15d/0x440 [ 315.047617][T17729] fat_get_block+0x46c/0x5e0 [ 315.052206][T17729] __block_write_begin_int+0x400/0xf90 [ 315.057671][T17729] cont_write_begin+0x5fc/0x970 [ 315.062535][T17729] fat_write_begin+0x4f/0xe0 [ 315.067125][T17729] generic_perform_write+0x184/0x490 [ 315.072399][T17729] __generic_file_write_iter+0x9e/0x120 [ 315.077946][T17729] generic_file_write_iter+0x8d/0x2f0 [ 315.083312][T17729] vfs_write+0x52a/0x960 [ 315.087546][T17729] ksys_write+0xda/0x1a0 [ 315.091796][T17729] __x64_sys_write+0x40/0x50 [ 315.096386][T17729] x64_sys_call+0x2802/0x3000 [ 315.101060][T17729] do_syscall_64+0xd2/0x200 [ 315.105564][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.111459][T17729] [ 315.113770][T17729] read to 0xffff88811c3d9200 of 512 bytes by task 17729 on cpu 0: [ 315.121567][T17729] fat_mirror_bhs+0x1df/0x320 [ 315.126243][T17729] fat_alloc_clusters+0x98b/0xa80 [ 315.128231][T17727] loop6: detected capacity change from 0 to 1024 [ 315.131264][T17729] fat_get_block+0x258/0x5e0 [ 315.131289][T17729] __block_write_begin_int+0x400/0xf90 [ 315.131316][T17729] cont_write_begin+0x5fc/0x970 [ 315.150894][T17727] loop6: detected capacity change from 0 to 2048 [ 315.152456][T17729] fat_write_begin+0x4f/0xe0 [ 315.163443][T17729] generic_perform_write+0x184/0x490 [ 315.168718][T17729] __generic_file_write_iter+0x9e/0x120 [ 315.174255][T17729] generic_file_write_iter+0x8d/0x2f0 [ 315.179622][T17729] vfs_write+0x52a/0x960 [ 315.183850][T17729] ksys_write+0xda/0x1a0 [ 315.188075][T17729] __x64_sys_write+0x40/0x50 [ 315.192650][T17729] x64_sys_call+0x2802/0x3000 [ 315.197314][T17729] do_syscall_64+0xd2/0x200 [ 315.201802][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.207679][T17729] [ 315.209986][T17729] Reported by Kernel Concurrency Sanitizer on: [ 315.216115][T17729] CPU: 0 UID: 0 PID: 17729 Comm: syz.3.3982 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 315.227466][T17729] Tainted: [W]=WARN [ 315.231247][T17729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.241283][T17729] ================================================================== [ 315.367293][T17727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.955437][T14766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.