last executing test programs: 8m43.837791804s ago: executing program 32 (id=351): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039040000000000000000ebff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m52.881765607s ago: executing program 33 (id=4595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000040)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000000200)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg$inet(r1, &(0x7f0000000980)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x41) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1040c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cb}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x1, 'wg1\x00', {}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m32.174330996s ago: executing program 34 (id=6254): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) 1m56.426751419s ago: executing program 35 (id=7948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x89}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000104}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfffffffffffffd22, &(0x7f0000000680)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xa00, "bdc6368fc950d3b1dfa5555d89883b9bc7c2e5415e8f122066dc9ab1b86b8a41a7b20f54423228ccabd703336ff5fb6f4c4af02e0aa84eb16df035d38fa890fd422a9014ac86ce6ce775359f791e6f63c6e01b8fa76523d7fa0c3731f5b28db9e3aa5a22d9b95f64121d5639428ff04f2f5f0fa8bb76678333cffd2f2a27d081a5144082b5f741f57c49b076384376e3549e1aae2ede839d9ca19aa1b1f22f2461e0"}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m54.62484009s ago: executing program 36 (id=8116): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 1m44.501061787s ago: executing program 9 (id=8245): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000102", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf251400000005000c0000000000080014000800000008000900ca0d00000800080007000000080017009700000008000d00ff0f00000800030001000000080009000300000008001400720e0000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r5, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x36c, 0x0, r5}, &(0x7f0000000180), &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") socket$packet(0x11, 0x3, 0x300) write$usbip_server(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006d6f6465000000000005000000000000000000000000000000000000000000000500030005000000100003000000000000006c656e63650020f5523c0ec9ef10336c94792dc97fdef23318c4ab6ecbaa17"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x20040084) 1m44.432754508s ago: executing program 9 (id=8250): dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 1m44.369200749s ago: executing program 9 (id=8252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x89}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000104}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfffffffffffffd22, &(0x7f0000000680)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xa00, "bdc6368fc950d3b1dfa5555d89883b9bc7c2e5415e8f122066dc9ab1b86b8a41a7b20f54423228ccabd703336ff5fb6f4c4af02e0aa84eb16df035d38fa890fd422a9014ac86ce6ce775359f791e6f63c6e01b8fa76523d7fa0c3731f5b28db9e3aa5a22d9b95f64121d5639428ff04f2f5f0fa8bb76678333cffd2f2a27d081a5144082b5f741f57c49b076384376e3549e1aae2ede839d9ca19aa1b1f22f2461e0"}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1m44.017039295s ago: executing program 9 (id=8254): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLom1bZCqiyCoICJaKHUTXOokFKQUEUGFioiL0gq1xa11cnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVSbUT50i/38d3vB5fcJe97//e4e94kw5EAjTWTZCFJK8lskk6S4mKD+6pl5mxzZ/JgJen1nvqlGLSrtivn/aaTbCd5NMl+WeSVdrK599zxb4dPPPj2RueBD/eenRzrQZ45OT568vSDpbc+WXxk86tvfloqspDu347r6hVDXmsXyR3Xo9gNomjXPQL+j+U3Pv62n/s7k9w/yH8nZaqT9876LfudPPz+v/V99+ev7x7nWIGr1+t1+p+B2z2gccok3RTlXJJqvSzn5qrv8N+1pspX19Zfn315bWP1pbpnKuCqDH73fjbx6fQ/8v9jq8o/cPPqJkdPL+9+318/bdU9GmCc+vmffWHrocg/NI78Q3PJPzSX/ENzyT80l/xDc8k/NJf8Q3PJPzSX/ENzXcw/ANAsvYm670AG6lL3/AMAAAAAAAAAAAAAAAAAAFy2M3mwcr6Mq+YX7yUnjydpD6vfGvwfcXLr4HHq16Lf7C9F1W0kz9874g5G9FHNd1/f9kO99b+8p976W6vJ9ptJ5tvty9dfcXb9Xbvb/+P9zosjFhjRY8/UW/+P3XrrLx4mn/fnn/lh80+ZuwbPw+efbv/8jVj/td9H3AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj82cAAAD//4TDbAU=") signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0xfffffffffffffffc, &(0x7f0000000300)) 1m43.280989869s ago: executing program 9 (id=8269): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000800)='./file0\x00', 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x80000001}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x7, 0x20002, 0xe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002700)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x40001000, 0x0, 0xb8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x7, 0x5, 0x1, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x9, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fb, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x4, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0xfffffffe, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x3, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x1, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x5, 0x9, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x40000723, 0x0, 0xe, 0xb, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0x2, 0x5, 0xd1b, 0xb87, 0x3, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82c, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.054038092s ago: executing program 9 (id=8272): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x8, 0x7e, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x4100c0, 0x1}, 0x47) 1m33.922277142s ago: executing program 2 (id=8420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01004217b92ba089d5f51a00000018000180140002006261746164765f736c6176655f31"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m33.899971502s ago: executing program 2 (id=8421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000620000006200000007000000070000000000001104000000ffffffff1f0000000000000100000000390056060c0000000200000f02000000010000002702000000000000050000002aa400000600000009e90700000000000011050000000800000002000000000000080300000000000030135f616100"], &(0x7f00000007c0)=""/78, 0x83, 0x4e, 0x1, 0x4}, 0x28) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008000071c2ce0482dd72dc00ce4c1ee12d1b8829f96163401d48af5f78f25bb9c2726c594775ea5ab78fc4ffb45e39dbed141e68669eed38e8fa19d52dad9db14c9cc6e49938fc4e94ca1f9e4e58c41769c2920de7dfc56ba35b082ba1826ecf53", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000004000018120000", @ANYRES32=r7, @ANYBLOB="0000008100000200b703000000001b000000b700000000000000950000a4a400000009a60cb8bb31d2d89d9cb781c137bdb795bd50f7fcfcd0e12f9a482801a97f17af18d49bae6e4ba72f534ed339cd5235215b693c8a6e1932aea527e27024d452cda2603a71e9"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd771882612c450d694c9dd7d7f28d237e84e2780ca6428d132e03f188fff6bd9f85ead7e68f90830db9295022700491841f4a15a000aa4e29ac23601041ec521aa0ea8044f23feb74151693f228ba89f0a43385617bc7930f30a52ca91d02c64bd39d3d581abe9089b2284f876f9c58c124aba7a28700efcb0588ff4ab54a62c0c64fd577d85f5f753ec15281cf73fc37442b0a5ca4a1818cb01590d6415b1e9fda6c7d63cd293d7cc7ca5581041a2736e95b9b0322880b5fd7f27c0d4a59df8101b755fd6cc495963381c8a95d5d605b8ef4800b47091c8749f9e8e9fce163e46db0f7c0e4d0d3a621e3c999453e95aaa56090f220b220c50b31b9d6af722477ab1cda6d561156d85c658a3cd42d777314d154bf31bb61918ac7de8bfad7a5825be505af82806130e8dd03816b86086cc3361bf3a2a0cf6c18b7c84503477660ef5a0bf92d8169c43df1d7bb140652c799a4ac292b94fcea7f0c74413791879104e2bc9b414eda6c74f3625299f67d03e3ef58eeae5ca5fb029005ffa0fe23fb541bc24a57e9c6d8169702998273789ee8c9f08132ab9f76c02a6696c3ad68bf7a772d8be6b1840cfad2184edcf10bd5620f51657239e8eb49b8e77c1483dcc3dc04aeb6cae2922af4be346d52f2983dd5330cbef40b3207432ea6d2a6d2ffb0c3440c78add8395da089aa80e21d8692b16582edea583b73266fd1ab37abc02aa89310ed72a827153f1cbba0f76147a09977724706fdcd68ac168ceb433eba816f55bb5069924c0a6c59b1116e27de7938b835c467dbd9be1843913748e5a2e6f6621bf4944045d82b5124d23fa1d87e780b54a6955a51e47fbf36432be1b3d9d01c05d86e390e497850600000000000000cef62edce520860667c5259478602febbc5e87f216a6f1452b285f44282333569cbd2f49613730b86a74485e49e1979690ee2c11e1fb49d642c9f515d9e0cf30fe8995379b0b4b2177b2541a34cef72af676c2402b3ab03993047186d45016f83a735b7babda7b3e408f9a7b5c36e7daaaad51e437060c8a5a07646a31a43ebdda0b12a3f64f963315febebf0ad610f2ec9500717c4f33d8bf0e5b55ed2a976339643658df80f07bb29f5fac6f25957ef64ef1bac93f0ea64bfea48b38a4985ff610259762996044543bdf2c", 0x341}], 0x1, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mlock2(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) fcntl$setpipe(r9, 0x407, 0x6) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'rose0\x00', 0x1000}) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) cachestat(r3, &(0x7f0000000040)={0x6, 0x9}, &(0x7f0000000080), 0x0) 1m33.031407267s ago: executing program 2 (id=8431): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000102", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf251400000005000c0000000000080014000800000008000900ca0d00000800080007000000080017009700000008000d00ff0f00000800030001000000080009000300000008001400720e0000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$qrtr(0x2a, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x36c, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") socket$packet(0x11, 0x3, 0x300) write$usbip_server(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f6465000000000005000000000000000000000000000000000000000000000500030005000000100003000000000000006c656e63650020f5523c0ec9ef10336c94792dc97fdef23318c4ab6ecbaa17"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x20040084) 1m32.89630013s ago: executing program 37 (id=8432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002c40), r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x1000, 0xc0, &(0x7f0000000b00)="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", &(0x7f0000000140)=""/192, 0x9, 0x0, 0x75, 0x3a, &(0x7f00000002c0)="62486b8c4c8069f1ba1b8cf202c18c54e6fe85e850d1141ac28f8b949d1b94bb3da1abac91140587361531c4228813f5e3a8a0d9b05d302ebfafad80d83a5b7f5d13a0164cb5f4b1f456cafa9c826a95ccfcfcf0e1d8cabe465a2139cb4d8d35c8916ab7f613b6158684492882f06d0c5162da8287", &(0x7f0000000400)="141cfb8a15fbb152bac36b8f82d1e42f5575dc205aafccd7ee9a95316d1a0c65af97a9ce7bf369ea5298526999c9dbd12630342ed34ce7415953", 0x2, 0x0, 0x4}, 0x50) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="180000000000000000000000000000101811000073ca00d81afb38f9d1c6d2203334d7044e07a3b47299b8c49c767bd053da9903200594f8641f1df31d04", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_clone3(&(0x7f00000003c0)={0x44084000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000002d00)={0x1c, 0x12, &(0x7f0000001b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x96}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x1000, &(0x7f0000001bc0)=""/4096, 0x41100, 0x0, '\x00', r10, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002c00)={0x5, 0x1, 0xb8ed, 0x6}, 0x10, 0x0, r6, 0x5, &(0x7f0000002c40), &(0x7f0000002c80)=[{0x2, 0x3, 0xf}, {0x2, 0x4, 0x0, 0x6}, {0x1, 0x1, 0xa, 0x7}, {0x5, 0x2, 0xd, 0xb}, {0x1, 0x4, 0x2, 0xe}], 0x10, 0x4}, 0x94) 1m32.760014062s ago: executing program 2 (id=8434): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLom1bZCqiyCoICJaKHUTXOokFKQUEUGFioiL0gq1xa11cnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVSbUT50i/38d3vB5fcJe97//e4e94kw5EAjTWTZCFJK8lskk6S4mKD+6pl5mxzZ/JgJen1nvqlGLSrtivn/aaTbCd5NMl+WeSVdrK599zxb4dPPPj2RueBD/eenRzrQZ45OT568vSDpbc+WXxk86tvfloqspDu347r6hVDXmsXyR3Xo9gNomjXPQL+j+U3Pv62n/s7k9w/yH8nZaqT9876LfudPPz+v/V99+ev7x7nWIGr1+t1+p+B2z2gccok3RTlXJJqvSzn5qrv8N+1pspX19Zfn315bWP1pbpnKuCqDH73fjbx6fQ/8v9jq8o/cPPqJkdPL+9+318/bdU9GmCc+vmffWHrocg/NI78Q3PJPzSX/ENzyT80l/xDc8k/NJf8Q3PJPzSX/ENzXcw/ANAsvYm670AG6lL3/AMAAAAAAAAAAAAAAAAAAFy2M3mwcr6Mq+YX7yUnjydpD6vfGvwfcXLr4HHq16Lf7C9F1W0kz9874g5G9FHNd1/f9kO99b+8p976W6vJ9ptJ5tvty9dfcXb9Xbvb/+P9zosjFhjRY8/UW/+P3XrrLx4mn/fnn/lh80+ZuwbPw+efbv/8jVj/td9H3AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABj82cAAAD//4TDbAU=") signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) 1m32.587497345s ago: executing program 1 (id=8435): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$eJzs3dFrW9cZAPDvynbiJM7sbHvIwpaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYGxraZ/61JdCn0uh5E9oC4H2vZTSEtokfWihrYrkqyZxZVsmlpVYvx8c33PuvfL3HQsd69x7uTeAjnUqIsYioisizkZEf7o+k5ZYWy/V/R7cvzVZLUlUKtc+TSJJ19V/V5Iuj6Qv642Iv/454h/J9+OWVlbnJgqF/FLazpXnF3OlldVzs/MTM/mZ/MLYyPDF0UujF0aHdq2vl//40f///eqfLr/1mxsfjH9y5p/VtPrSbY/3oxlrTe633vWe2t+irjsilnYS7BnWlfanp92JAADQlOp3/B9GxC8i4uFL7c4GAAAAaIXK7/viqySiAgAAAOxbmdo1sEkmm14L0BeZTDa7fg3vj+NwplAslX89XVxemFq/VnYgejLTs4X8UHqt8ED0JNX2cK3+qH1+Q3skIo5FxH/7D9Xa2cliYardBz8AAACgQxzZMP//vH99/g8AAADsMwPtTgAAAABoOfN/AAAA2P82nf8n3XubCAAAANAKf7lypVoq9edfT11fWZ4rXj83lS/NZeeXJ7OTxaXF7EyxOFO7Z9/8dr+vUCwu/jYWlm/myvlSOVdaWR2fLy4vlMdrz/Uez3tONAAAAOy9Yz+/834SEWu/O1QrVQfSbU3M1cdamx3QSpmd7Z60Kg9g73W1OwGgbba5wPedn+5VIsCecz4e2GZi/78N7R0eNgAAAJ4Fgz95qvP/zgfCc8xEHjqX8//QudzgCzqX8//Q4Q5uv0vvZhve3uVcAACAlumrlSSTTc8F9kUmk81GHK09FqAnmZ4t5Ici4gcR8V5/z8Fqe7jdSQMAAAAAAAAAAAAAAAAAAAAAAADAc6ZSSaICAAAA7GsRmY+T9EH+g/2n+zYeHziQfNFfW0bEjZevvXBzolxeGq6u/+y79eUX0/Xn23EEAwAAANioPk+vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDc9uH9rsl72Mu69P0TEQKP43dFbW/a+0R8Rhx8m0f3Y65KI6NqF+Gu3I+J4o/hJNa0YSLPYGD8TEYfaHP/ILsSHTnanOv6MNfr8ZeJUbdn489edlqd179Rm41+mPv7VxrlG49/RJmOcuPt6btP4tyNOdDcef+rxk6ccf//+t9XVzbZVXokYbPj/J3kiVq48v5grrayem52fmMnP5BdGRoYvjl4avTA6lJueLeTTnw1j/Odnb36zVf8PbxJ/YJv+n26y/1/fvXn/R1vEP/PLjfG/rL3/x7eIX/3b/yr9P1DdPlivr63XH3fytXdPbtX/qU36v937f6bJ/p+9+q8Pm9wVANgDpZXVuYlCIb+k8lxWeryDKltVrqYf9B2/vM0DEwAAsOsefelvdyYAAAAAAAAAAAAAAAAAAADQuVp+E7KDT95ZoLd9XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2NK3AQAA///VO9QU") bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000580)=ANY=[@ANYBLOB="2316000001"]) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1210010, &(0x7f0000000040)={[{@grpquota}]}, 0x41, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000300, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3e}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r5 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r5, 0x0, 0x0, 0x8, 0x365) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x6, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 1m32.282322871s ago: executing program 2 (id=8436): syz_io_uring_setup(0x7219, &(0x7f0000000280)={0x0, 0x1064, 0x80, 0x2, 0x224}, &(0x7f0000000040)=0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000028"], 0x20) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f4b0000000000005afd308329caace186dd4142623d991b4cc032688e75c5d400"/42, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1m31.570674103s ago: executing program 1 (id=8441): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01e6bd70000500000005000000"], 0x14}, 0x8, 0x3000000000002}, 0x844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbff, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5f7, 0x8b60, 0x5, 0x101, 0x88}, 0x65, 0x6}, [{0xfff, 0x6, 0x3, 0x7, 0x5, 0xa92}, {0x65a, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x8001, 0x2, 0x1, 0x9}, {0x10, 0x7, 0xfffff000, 0x6f30, 0xf}, {0x7, 0x9, 0x4, 0x1caece98, 0xf, 0xefcf}, {0x48a0, 0xb, 0x200, 0x9, 0x7f, 0x7}, {0x1, 0x7, 0x81, 0x800, 0x4, 0x3}, {0x6, 0x9e, 0x4, 0x400, 0x8}, {0x4, 0x8, 0x3, 0xa, 0x5, 0xa99c}, {0x4, 0xfc, 0x8, 0x7, 0x5}, {0x5, 0x2, 0x7, 0xffffc8e1, 0x35a59efd, 0x400}, {0x6, 0x5, 0x4, 0xfffffff7, 0x1739, 0xffffff00}, {0x6, 0x9, 0x4, 0x7ff, 0x2, 0x7}, {0x7ff, 0xfffffffb, 0x0, 0x8, 0x22e8, 0x80}, {0x1, 0x9, 0xf, 0x7f2b, 0x5, 0x2}, {0x1, 0x6, 0x3, 0xfff, 0xf19, 0x4}, {0x9, 0x80000001, 0x3, 0xa124, 0xb6, 0x2}, {0x401, 0x1, 0x5, 0x8, 0x485, 0x4}, {0x8001, 0x5, 0x0, 0xfffffc00, 0x1, 0x9}, {0x12fb, 0x9, 0x8, 0x10f, 0x0, 0x3}, {0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0xfffffffb, 0x9}, {0x0, 0x8, 0x9, 0x6, 0x3, 0x97}, {0x813, 0x5d8, 0x8, 0x8, 0x9, 0x1}, {0x4, 0x9, 0x8, 0x4, 0x2, 0x1}, {0x1, 0x0, 0x7fff, 0xfffffff8, 0x4, 0xfffffff0}, {0xe79, 0x7, 0x7ff, 0x5, 0x0, 0x5}, {0xc2d7, 0x400, 0x6, 0x5, 0x0, 0x2}, {0xfffffffd, 0x2, 0x5, 0xfc, 0xfffffff5, 0xfffffc00}, {0x5, 0xfff, 0x1524, 0x0, 0x7, 0xfff}, {0x6, 0x0, 0x155c, 0x7, 0x7}, {0x2, 0x1, 0xfffffff7, 0x5, 0xfffffff7, 0x7fff}, {0x2, 0x6d48, 0x1, 0x8, 0xf, 0x7}, {0x1, 0x4, 0x7341, 0xd, 0x8936}, {0x1, 0x5, 0x1, 0x3, 0xa0, 0xb285}, {0x7fffffff, 0x0, 0x4, 0xbb, 0x8, 0xfffffff8}, {0x2, 0x5, 0x6, 0x1, 0x9}, {0x8, 0x4, 0x30, 0x200, 0x2, 0x7}, {0x3, 0x3ff, 0xe, 0x0, 0xafbe, 0x3c0a}, {0x80000000, 0x3, 0x1, 0x1, 0x891f, 0x4}, {0x9, 0x80000000, 0x74, 0x9, 0x1, 0x99}, {0x9, 0x1, 0x0, 0x10001, 0x3ff, 0x7fff}, {0x9, 0xffff, 0x5ef7, 0x5, 0x3, 0x6}, {0x5, 0x19, 0x0, 0x0, 0x401, 0x500000}, {0x2, 0x1, 0x9, 0x489a, 0x2, 0xb}, {0x80000000, 0x0, 0x4, 0x4, 0x5, 0x1}, {0x0, 0x4, 0x2, 0x5, 0x3, 0x8f}, {0xffffffff, 0x45, 0xffff, 0x7, 0x5, 0x9}, {0x1, 0x0, 0x401, 0x4, 0xa32, 0x401c}, {0x5, 0x1000, 0xfffffff9, 0x1b00000, 0x0, 0xd7}, {0xbfb1, 0x2, 0x2, 0xcb3, 0x6f8, 0x7}, {0x3, 0xe70, 0xd1d, 0x4, 0x4, 0x3}, {0xc7, 0x5, 0x5, 0x9, 0x3, 0x7}, {0x34, 0x88, 0x1e97d19c, 0x2, 0x8, 0x40}, {0x11a5, 0x1, 0x10000, 0x3, 0x3, 0x1ff}, {0x8, 0x6, 0x5, 0x3, 0x1e3e4ead, 0x80000001}, {0x401, 0x6, 0x1, 0x4, 0x2, 0x4}, {0x9, 0x71cfabe7, 0x5, 0x4, 0x8, 0x9}, {0xa, 0xffff, 0x4, 0xf, 0x80, 0x9}, {0xa17, 0x1, 0x5, 0x7, 0x300000, 0xb9}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x6}, {0x1, 0x2, 0xead, 0x4, 0x4, 0x3}, {0x6, 0xffffffff, 0x9, 0x7, 0xe8, 0xb76}, {0x7, 0xe, 0x2, 0xac, 0x10001, 0x5a4}, {0x1, 0x0, 0x5, 0x3, 0x7ff, 0x100}, {0x9, 0x1, 0xfffffe01, 0x8, 0x8, 0x6}, {0x10000, 0x2, 0x8, 0x0, 0x9, 0x940}, {0x21db, 0x4, 0x40000000, 0xa1, 0x96, 0x7}, {0x581ba20a, 0x9, 0x0, 0x83, 0x4, 0x4}, {0xd, 0xe3, 0x0, 0x19c3, 0x6, 0xffffffff}, {0x7ff, 0xe00000, 0x2, 0x6, 0x5d, 0x6}, {0xfff, 0x0, 0x4, 0xfffffbff, 0x3, 0x2}, {0x9f, 0x5, 0x10, 0x280000, 0x800, 0x4}, {0xf, 0x80000001, 0xffffffb2, 0x2b, 0x5, 0x2}, {0x6, 0x8, 0x7, 0x6e6, 0xe9}, {0x10000, 0xfffffff8, 0xb78, 0x4, 0x4, 0x6}, {0x1, 0xfffffffb, 0x3ff, 0x1, 0xade, 0x7ff}, {0x6, 0x2, 0xfffffff7, 0x7, 0x2, 0x7f}, {0x4, 0xf590, 0x80, 0x1, 0x8001, 0x4}, {0x6, 0x2, 0x480, 0x79, 0x9, 0x6}, {0x1, 0x3d40, 0x7, 0x46d, 0x8, 0xd}, {0x7, 0x2, 0x1, 0x9, 0x84c4, 0x9}, {0x2756, 0x400, 0x4, 0x2, 0x0, 0x1}, {0xffffffff, 0xe, 0x1, 0xa8, 0x2, 0x7fffffff}, {0x2, 0x1, 0x3, 0x3, 0x4, 0x9}, {0x3b7, 0x3, 0x2, 0x7, 0x6, 0x8}, {0x5, 0x8001, 0x81, 0x56, 0x9, 0x7}, {0x1, 0x0, 0x7ff, 0x3, 0x8, 0x3}, {0x2e73, 0x1f, 0xdb72, 0x7c365bee, 0x8, 0x3}, {0x8001, 0x5, 0x1, 0x7, 0x1, 0x9}, {0xffff2508, 0x2, 0x101, 0x100, 0x0, 0x6}, {0x38f5, 0xffff8000, 0x81, 0x9, 0x7, 0x8}, {0x7, 0x9, 0x9, 0x80000001, 0x3ff, 0x101}, {0x413d22a0, 0x1, 0xb65c, 0x7, 0x81, 0x4}, {0xa, 0x95, 0x101, 0x4, 0x0, 0x5}, {0x1ff, 0x20, 0x8, 0x5592, 0x9, 0x100}, {0x4, 0x9, 0x81, 0xfffffff8, 0x7, 0xe86}, {0x3, 0x6, 0xd, 0x1, 0x4, 0x3}, {0xe, 0x9958, 0x81, 0xfffffff0, 0x1, 0x5}, {0x0, 0x7, 0xfffff07c, 0x845, 0xfff}, {0x0, 0xfffffff9, 0x6, 0x8, 0x5, 0x5}, {0x4, 0x7, 0x9, 0x330a, 0x4, 0x8}, {0x30f0a026, 0x8, 0x4, 0x7, 0x6, 0xff}, {0x7, 0x0, 0x3800000, 0x8, 0x4cc0c7e8, 0x3}, {0xb1, 0x2, 0x98, 0x8001, 0x80000001, 0x1}, {0x200, 0x9, 0xfffffffb, 0x7, 0x800, 0x8}, {0x6, 0xe, 0x23, 0xf, 0xd9, 0x5}, {0x400, 0x9, 0x100, 0x8, 0x100}, {0x0, 0x0, 0xe, 0x0, 0x4, 0x7b}, {0x92e, 0x400, 0xffffff01, 0x2d, 0xc07, 0x400}, {0x4, 0x4, 0xc76, 0x7, 0x8, 0x558b}, {0x4, 0x9, 0x2bc, 0xa0, 0x3ff, 0x2}, {0x6, 0x1, 0x5, 0x2, 0x7, 0x7f}, {0x3, 0x49a, 0x2, 0x2, 0x4, 0x10}, {0x2, 0x7, 0x9, 0x5, 0x6}, {0x63f024bb, 0xa0, 0x5, 0x3, 0x8, 0x7b}, {0x1, 0x10001, 0x81, 0x9, 0x5, 0x7}, {0x5, 0x1ff, 0x1, 0x7, 0x8000, 0xa457}, {0xc, 0x9, 0xffffff00, 0x605, 0x0, 0x774}, {0x4, 0x5, 0x8, 0x400, 0x5d85, 0x9}, {0x4, 0x2, 0x10001, 0x7, 0x0, 0x10000}, {0x9, 0x2, 0x9, 0x9, 0x1, 0x79f}, {0x6, 0x8, 0x1, 0x2, 0x0, 0xffff8001}, {0x100, 0x9, 0x4, 0x8, 0x7, 0xd2f}, {0xfffffeff, 0x4, 0x30, 0x2a, 0x6, 0x2}, {0x5, 0x3, 0x0, 0x35, 0x9, 0x9e}, {0x9, 0x5, 0xe2, 0x5, 0x0, 0x1}, {0x4, 0xa, 0x0, 0x3, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0xbd8a62aa819b833a}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x6, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x60acfaa94dc96dc1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x9293fc9a996600a2, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x7}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1ff, 0x100, 0x10000000, 0x55, 0x8000}, 0x9, 0x7}, [{0xdd, 0xffff9bcb, 0x0, 0x8, 0x40}, {0x10, 0x400, 0x1, 0x89, 0xe, 0xf}, {0x9, 0xbc, 0x15, 0x3, 0x23b0, 0x4}, {0x3, 0x3, 0x6, 0x80000001, 0x4, 0x236}, {0x4, 0x1, 0xb3, 0x4, 0x2, 0x101}, {0x5, 0x6, 0xfe2a, 0x2, 0x4d8, 0x6}, {0x6, 0x3, 0x2, 0x9, 0x6, 0x8}, {0xfff, 0x9, 0x9, 0x5, 0x3, 0x8001}, {0xffffffff, 0x7, 0xfff, 0x8b9, 0x6, 0x7}, {0x80000001, 0x6, 0xfffff75c, 0x2262, 0x80, 0x4}, {0xfffffffa, 0xa, 0x7f, 0x8, 0x7, 0x2}, {0x8, 0x2, 0x80000001, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0xb, 0x2, 0xff}, {0xffffffff, 0x6, 0x3, 0xffffffff, 0x200}, {0x101, 0x5, 0x6, 0x4, 0xfffffffa, 0x7}, {0x0, 0x80, 0x71d3, 0x459, 0x6, 0xfffffffc}, {0x81, 0x3d7, 0x2, 0x9, 0x4, 0x5}, {0xfffffffc, 0x0, 0x6, 0x1000, 0x4, 0x1000}, {0x1, 0xdf7, 0x0, 0x3, 0x80, 0x3}, {0x5, 0xb, 0x47, 0x3, 0x7, 0x9}, {0xb2ac, 0xebe, 0x7df, 0xfffff001, 0x80, 0x539e}, {0x3, 0x10000, 0x7ff, 0xc4, 0x9, 0x7b1a}, {0x6, 0x9, 0x5cb, 0xfffffff9, 0x33c3, 0xfff}, {0x5, 0xffff9448, 0x8001, 0x7, 0x0, 0x471f83e2}, {0x7f7, 0xcba, 0x100, 0x3, 0xd, 0x5}, {0x6, 0x0, 0xffff, 0x3, 0x40, 0x946}, {0xf535, 0x10000, 0x2, 0x7, 0x6, 0x8000}, {0xffffff7b, 0x8, 0x2, 0x90000000, 0xfa, 0x2}, {0x6, 0x3, 0xc, 0x3, 0x5}, {0x2, 0x2, 0x548fb84d, 0xfffffffb, 0x9, 0x2}, {0x4, 0x0, 0x6, 0xe5, 0x80000000, 0x4}, {0xc2, 0x7ff, 0xb, 0x0, 0x4, 0x66}, {0x7, 0x30b, 0xfffffffe, 0x21, 0x5, 0x1}, {0x3f, 0x9, 0xffff, 0xffff, 0x3, 0x1}, {0x0, 0x0, 0xffff, 0x5, 0x5, 0x1}, {0xffffffff, 0x8, 0x9, 0x6, 0x1, 0x2}, {0x8, 0x4, 0x17b3, 0x3, 0x4, 0x2e}, {0x3, 0x6, 0xfa, 0x2, 0x2, 0x6}, {0x2, 0x5, 0x3, 0x9, 0x63c9, 0xf5c}, {0x3, 0xffff, 0xae2c, 0xfffffffc, 0x9, 0x5}, {0x4, 0x3, 0x6, 0x4, 0xd4c, 0x9a}, {0x1, 0x4f, 0x10001, 0x3, 0x9, 0x6}, {0x6, 0x75, 0x8, 0x2, 0x101, 0x7}, {0x0, 0x4f, 0xff, 0x3, 0xc4a6, 0x2}, {0x6, 0x32000000, 0xff, 0x1000, 0x2, 0xffffffff}, {0x0, 0x6, 0x7, 0x6, 0x5, 0x1}, {0x6, 0x9, 0xffff, 0x6, 0x1, 0xb4}, {0x0, 0x1, 0xfbd1, 0x8, 0x5, 0x3}, {0x0, 0x200000, 0x7ff, 0x6, 0x6, 0xfffffffe}, {0x3, 0x8, 0x3, 0x3, 0x8, 0x5}, {0xfffffffb, 0xfff, 0xf, 0x2, 0x1, 0x4}, {0x6, 0x7f, 0x4, 0x4, 0x5, 0x10001}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x400, 0x10001}, {0x100, 0x401, 0x9, 0xfffffffd, 0x4, 0x3}, {0x2, 0xfad, 0xa, 0x2, 0x7f, 0xa}, {0xa, 0x1, 0x7, 0x0, 0x21f, 0x2}, {0x7, 0x6, 0xd, 0x6, 0x9, 0x9}, {0x0, 0xfffffffb, 0x1, 0x7ff, 0xb52, 0x3}, {0x80000001, 0x101, 0x5, 0x7, 0x1000, 0xbc78}, {0x6, 0x8, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xd, 0x0, 0xfffffffc, 0x7fff, 0xffff}, {0xca9, 0x7f, 0x5, 0x3, 0x9, 0xffffffff}, {0x4, 0x2, 0x101, 0x8, 0x6, 0xe6}, {0x9, 0xfffffac5, 0x0, 0x7, 0x8, 0x8000}, {0x1, 0x7, 0x1, 0x0, 0xcc, 0xff}, {0x400, 0xc, 0x7, 0x3, 0x100, 0x8}, {0x8001, 0x2e, 0x4, 0x400, 0x3, 0x800}, {0x5, 0x2, 0xe9, 0x7, 0xc}, {0x7ff, 0x5, 0x0, 0x5, 0x800, 0x1ff}, {0x1, 0x3, 0x9, 0x3ff, 0x4026944d, 0x9}, {0x8, 0x1, 0x4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x10000, 0x1, 0x3, 0x2}, {0x4, 0x7, 0x10000, 0x6, 0x297, 0xff}, {0x0, 0x1000, 0x4, 0x7, 0x10001}, {0x5, 0xbde, 0x5, 0x2cd78ace, 0x3, 0x8}, {0x3, 0xc6, 0x800, 0x5, 0x6, 0x40}, {0x1d47, 0x0, 0x1, 0x5, 0xffffffff, 0x11c}, {0x1, 0x162, 0xc86, 0x4, 0x2, 0x3}, {0x98f, 0x6, 0xecfd, 0x40, 0xf28, 0x7ff}, {0x5, 0x6, 0x5, 0x8, 0x2, 0x401}, {0x6, 0x40, 0x40, 0x9, 0xfffff503, 0x5f0a8000}, {0xf50c, 0x2655, 0x7f, 0x1c, 0x3, 0x9}, {0x0, 0x80, 0x4, 0x6, 0x1e7072c6, 0x1cf000}, {0xfffffff7, 0x5, 0x3ff, 0x9, 0x30}, {0xbbe5, 0x3ff, 0x7, 0x0, 0x400, 0x100}, {0x2, 0x9, 0x4, 0xec, 0x8, 0x80000001}, {0x1, 0x2, 0xd40b8fe7, 0xfb29, 0x2, 0x1d65b554}, {0x3b1b2cfe, 0x4, 0xa6, 0xc0000000, 0x401, 0xfffffff1}, {0x0, 0x7ff, 0x0, 0xffffffc0, 0x7fff800, 0x7}, {0xd, 0x5, 0x6, 0x5, 0x0, 0x10000}, {0x0, 0x6, 0x1, 0x4, 0x4, 0x4}, {0x4, 0xf0, 0x9, 0xfffffffe, 0x5}, {0x8001, 0x2ded, 0x6, 0x6, 0x7, 0x2}, {0x179, 0x2, 0xfffffffe, 0x200, 0x10000, 0x5}, {0x1, 0x1, 0x2, 0xf1e, 0x4, 0xfb6d}, {0x1, 0x6102, 0xd02, 0x5, 0xf5b, 0xf}, {0xf58, 0x3, 0x6, 0xe, 0x9, 0xffff}, {0x0, 0x9, 0x8, 0x0, 0x9}, {0x10, 0x3, 0x4, 0xa, 0xfffffff9, 0x9}, {0x6, 0x62, 0x3f3, 0x80000001, 0x5, 0x4}, {0x4, 0x81, 0x23, 0x2, 0x6, 0xff}, {0xc, 0x10, 0x7, 0x8, 0x4, 0x10001}, {0x4, 0x559ed72d, 0xcac, 0x0, 0x2, 0xffff}, {0x6, 0xe1, 0x100, 0x401, 0x200, 0x9}, {0x3a6f6741, 0xe6a4, 0x9, 0x5, 0x1, 0x4}, {0x8000, 0x6, 0x19, 0x400, 0x2, 0x8}, {0x6469c0e4, 0x0, 0x10000, 0x7, 0x0, 0x5}, {0x0, 0x9, 0x0, 0xfffffeff, 0x0, 0x3}, {0x200, 0x80, 0xa, 0x4, 0x7ca}, {0x5f, 0x3ff, 0x3ff, 0x489733aa, 0xcc, 0x10000}, {0x5, 0xba, 0x6, 0x1, 0x6, 0x10}, {0x1, 0xc, 0x7, 0x1ff, 0x53, 0x3}, {0x6, 0x2, 0xc, 0x2, 0x7f, 0x9}, {0xf0, 0x81, 0xfffffff7, 0x3, 0x3, 0x80000001}, {0xf5b, 0x7e, 0xb, 0x4, 0x9, 0x4}, {0x2f, 0x1, 0xffff491c, 0x9, 0xfffff8ec, 0x6bca}, {0x8001, 0x8, 0x3, 0x6, 0x8, 0xf}, {0x1, 0x7, 0x9, 0x2, 0xfffffffd, 0xffffffff}, {0xffff, 0x400, 0xb, 0x5, 0x8, 0xa}, {0x8001, 0x8, 0xbe, 0x6, 0x9, 0xffff7fff}, {0x5c, 0x0, 0x3b, 0x2, 0x6, 0xff}, {0x0, 0x6, 0x100, 0x1ff, 0x7fffffff, 0x8}, {0x8, 0x0, 0x8, 0xfffffff7, 0x10001, 0x722c}, {0x3f, 0x8, 0x4, 0x1, 0x7f, 0x1000}, {0x7, 0x2, 0x7, 0x8248, 0x64, 0xc}, {0x2, 0x1, 0x4, 0x0, 0x100, 0xc46a}, {0x1b0, 0x4, 0x8bdb, 0x7, 0x5, 0x1}, {0x0, 0x8981864, 0x90000, 0x3, 0x6, 0x2}], [{0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x3}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x4a04d0d0d040c9a}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x7}, {0x2}, {}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x3, 0x7f}, 0x1, 0x2}, [{0x1, 0x5, 0x4, 0x2, 0x9, 0x3e341d61}, {0x42, 0xfffffffd, 0x8, 0x0, 0xea, 0x68000000}, {0xa8, 0x1d2, 0xe8a, 0x7d, 0x17eb, 0xb0}, {0x2, 0x100, 0x4, 0x7, 0x5}, {0x9103, 0x4, 0x5, 0x0, 0xfffff728, 0xc}, {0x3, 0x401, 0x8c, 0x6, 0x4, 0x369}, {0x4c92, 0x9, 0x2, 0x7, 0xfe07, 0x5}, {0x8f31, 0x6, 0x2, 0x101, 0x0, 0x20000}, {0xffffffff, 0x0, 0x7f, 0xf18, 0x9, 0x7}, {0x4, 0x3, 0x2e, 0x7fffffff, 0x3, 0x7}, {0x0, 0x0, 0xfffffffd, 0xfffff6ff, 0x6, 0x38000}, {0xc6a, 0x0, 0xffffff83, 0xe6ca, 0x9, 0xc}, {0xc, 0x7, 0x2, 0xfffffdfe, 0x8001, 0x8001}, {0x3f8, 0x5d0, 0x40, 0x0, 0x8, 0x7e04}, {0x3ff, 0xfffffffe, 0x8, 0x643, 0x7, 0x4a}, {0x81, 0x6, 0x6, 0x1ff, 0x8100, 0x20000000}, {0x3ff, 0x3, 0x200, 0xf33d, 0x9, 0x5}, {0x81, 0x1, 0x7ff, 0xefc8, 0x0, 0x5}, {0x7fffffff, 0x6, 0x2, 0xba4, 0x6, 0x1}, {0x2, 0x38, 0x1, 0x80000001, 0x7fff, 0x1}, {0x7, 0x6, 0x101, 0x4, 0x6, 0x80e57}, {0x6, 0x2, 0x401, 0x6, 0x5, 0x1}, {0x7, 0x9, 0x9, 0x2, 0xfffffff9}, {0xf21, 0x7fffffff, 0xfffffffb, 0xc, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x8, 0xffff8000, 0x3}, {0x3, 0x4, 0x7, 0x3, 0x5, 0x8}, {0xffffff01, 0x7, 0x3, 0x7, 0xfff, 0x6}, {0x81, 0x6, 0x3, 0x2, 0x9, 0x3}, {0x2, 0x8, 0xda, 0x6, 0x7, 0x3}, {0x6, 0x8, 0xf86, 0x10, 0x3f, 0x7}, {0x7fffffff, 0x0, 0x81, 0x200, 0x1, 0x604}, {0x7fff, 0x0, 0x80000001, 0x68f7e38f, 0x2, 0x6}, {0xf46, 0xe, 0x6, 0x0, 0xae, 0xff}, {0xfffffffb, 0x80, 0x3, 0x9c, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x9, 0xffffffff}, {0xc, 0x8, 0x8001, 0x3, 0x0, 0x5}, {0x1, 0xffffffff, 0x2, 0xe, 0xac, 0x2}, {0x3a5b, 0x5, 0x5, 0x5, 0x7f, 0x7}, {0x1, 0x9, 0x7fffffff, 0x0, 0x2, 0x7}, {0x8, 0x7ff, 0x1, 0x7ff, 0x7dbd, 0x4ec0}, {0x7, 0x1, 0xffffffff, 0x1, 0x40, 0x5}, {0x1, 0x0, 0x6094, 0x0, 0x3, 0x1}, {0xfff, 0x5, 0x80, 0x8, 0x7, 0x1}, {0x6, 0x8001, 0x1, 0x100, 0xf8ab, 0x6}, {0x4a, 0x5, 0x0, 0x8d7e, 0x1, 0x400}, {0xf, 0x7f, 0x1, 0x7fffffff, 0xc, 0x101}, {0x7, 0x81, 0x7, 0x4, 0x917, 0x6}, {0x6, 0x1fe00000, 0x3, 0x4, 0x3, 0xa0000000}, {0xa77d, 0xfffffff9, 0x8}, {0x403, 0x5, 0x1, 0x2, 0x8, 0x10001}, {0xd, 0x401, 0xf, 0x7f, 0x15e4, 0x9}, {0xfffffffc, 0x5, 0x5, 0xfffffca9, 0x90, 0x3}, {0xf4, 0x2, 0x4, 0x4, 0x2, 0x8a4a}, {0x3, 0x6, 0x4, 0x8, 0x7, 0x1}, {0x1ff, 0x6, 0x7fffffff, 0x60, 0x3, 0xe}, {0x7, 0x993b, 0x400, 0x10000, 0x3, 0xe}, {0x7, 0x6, 0x1, 0xfff, 0xffffffff, 0x3ffc}, {0x7, 0x10000, 0x2, 0x80000000, 0x0, 0xffff}, {0xffffffff, 0xf, 0x5, 0x4, 0xd5, 0x9}, {0x7ff, 0xae96, 0x3, 0x6, 0x3, 0x1}, {0x4, 0x2, 0x8, 0x5, 0xf424, 0x5}, {0x9, 0x5, 0xade7, 0x9, 0x2, 0x5}, {0x6, 0x4, 0x1, 0xb1e, 0x0, 0x2}, {0x6, 0xd, 0x1, 0x80, 0x5, 0xc75}, {0xf, 0x5, 0x1, 0x3e989c97, 0xfffffffe, 0x5}, {0x200, 0xdc, 0x5, 0x8000, 0x1000, 0x5}, {0x2, 0x200, 0x7, 0x8, 0x1ff, 0x3}, {0xc0, 0x1, 0x5, 0x52, 0x7, 0xfffffff8}, {0xff, 0x2, 0x10001, 0x0, 0x2, 0xffffff00}, {0x4, 0xed, 0xfffffff9, 0x1307, 0x2, 0x1}, {0x0, 0x0, 0xb, 0x6, 0x6, 0x80000000}, {0xb623, 0x10000, 0x1, 0x8, 0x6, 0x8}, {0x4, 0x9, 0xe7, 0x2, 0x40, 0x401}, {0x4, 0x8001, 0x5, 0x97c, 0x2, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff7}, {0x1, 0x8, 0x4, 0x865, 0x2, 0x7}, {0x6, 0x3, 0x5d, 0x8e816326, 0xc, 0x6}, {0x5, 0xee6c, 0x2, 0x5, 0x40, 0x101}, {0x2, 0xfffffff9, 0xd, 0x66, 0x5, 0x9}, {0x4, 0xfffffff8, 0x3, 0x6, 0x4, 0x5}, {0x1, 0xdd, 0x6, 0x6, 0x80000001, 0x8818518a}, {0x7, 0x1, 0xff, 0x7fff, 0x8, 0x6}, {0x9, 0x9d, 0x2, 0x9, 0x7b7fb9f0, 0x9}, {0x30, 0x7, 0x3, 0x100000, 0x8, 0xfffffe01}, {0xfffffffc, 0x6, 0x40, 0x0, 0xfffff5a2, 0x401}, {0x1, 0x100, 0x5, 0x3, 0x7, 0x7}, {0x1, 0x800, 0x3, 0x40, 0x5, 0xc}, {0x3, 0x3ff, 0x4, 0x7, 0x9, 0xd}, {0x1, 0x401, 0x9, 0x6, 0x7, 0x6}, {0x3, 0x7, 0x3, 0x1, 0x10001, 0x9}, {0x2, 0x7fff, 0x9, 0x9, 0xb}, {0x7, 0x7, 0x2, 0x0, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x6, 0x7, 0x5}, {0x9, 0x7, 0x1, 0x2, 0x1, 0x80}, {0x9, 0x7f, 0x5, 0x5, 0xeb, 0x5}, {0x3, 0x1, 0x8000, 0x5, 0x8, 0x3}, {0x1, 0x5a1c, 0x8001, 0x7ebe, 0x4cf72505, 0xcd}, {0x0, 0x6, 0x6, 0x5, 0x1ff0, 0x10001}, {0xe, 0x1, 0x3, 0x2, 0x9, 0x100}, {0x5, 0x7ff, 0x3, 0x80, 0x200, 0x4}, {0x4, 0x6, 0x1ff, 0x3ff, 0x20000000, 0x8}, {0x31b, 0x8001, 0xe, 0x1, 0x3, 0x8}, {0x6, 0x2, 0x5, 0xb, 0x1, 0x8}, {0xf, 0x6, 0x98a, 0x3, 0x1, 0x3}, {0x5276, 0x366, 0x5, 0x44, 0x0, 0x5cd0}, {0x80000001, 0x8, 0x2, 0x24c, 0x7, 0x1000}, {0x1, 0x2, 0x6, 0x2, 0x5}, {0x5, 0x8, 0x80, 0x1, 0x5, 0x401}, {0x1, 0x5cf, 0xa, 0x2, 0x3, 0x8}, {0x800, 0x4, 0x2, 0x1, 0xc0, 0xfffffffa}, {0x7, 0x3ff, 0x200, 0x0, 0x2, 0x5}, {0xffffffff, 0x7, 0xf, 0x0, 0x8, 0x3}, {0x3, 0xb2b2, 0x194f9bf4, 0x87a4, 0xaab7, 0x7}, {0x7, 0x9, 0xa8e, 0x7, 0x60670000, 0x7}, {0x40, 0x10000, 0x4, 0x2, 0x0, 0x1}, {0x5, 0x9, 0xffffff7f, 0x7, 0x3}, {0x8e5, 0x1, 0xa, 0x28, 0x9, 0x80000001}, {0x3, 0x80000001, 0xe225, 0xd, 0x8, 0x9}, {0x29d, 0x401, 0xffffffff, 0xfff, 0xfded, 0x8}, {0xfffffbff, 0xe, 0x0, 0xffffff81, 0x8, 0xfffffffe}, {0xed6, 0x3, 0x5, 0x259c, 0x9, 0x3}, {0xfffffbff, 0x7f, 0x400, 0xfffffff9, 0x0, 0x1}, {0x0, 0x7ff, 0x40, 0xcd, 0x6, 0x8}, {0x6, 0x6, 0x1, 0x9, 0x61, 0xffffffff}, {0x6, 0x8, 0x0, 0x4, 0x5, 0x6}, {0x8000, 0xff, 0x516, 0x0, 0x2371, 0xffff}, {0x8, 0x1, 0x6, 0x9, 0x101, 0x86}, {0x5, 0x8, 0x186, 0x1, 0x101, 0x80000000}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0xd171415e8ad05f3d}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x3}, {0x6}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0) 1m31.491514344s ago: executing program 2 (id=8442): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) r2 = socket(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) r6 = fcntl$getown(r2, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(r10, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl=']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='jbd2_checkpoint\x00', r10, 0x0, 0x9}, 0x18) sched_setaffinity(r6, 0x8, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x2c, 0x14, 0xf0b, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xd}, {0x4, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1m31.454900775s ago: executing program 38 (id=8442): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r1, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) r2 = socket(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) r6 = fcntl$getown(r2, 0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) socket$inet6_tcp(0xa, 0x1, 0x0) mount_setattr(r10, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl=']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='jbd2_checkpoint\x00', r10, 0x0, 0x9}, 0x18) sched_setaffinity(r6, 0x8, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x2c, 0x14, 0xf0b, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xd}, {0x4, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1m31.406284675s ago: executing program 1 (id=8444): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f00000003c0)={0xf97cff8c, 0x8}, 0x10) 1m31.382563286s ago: executing program 1 (id=8445): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) 1m30.904942684s ago: executing program 1 (id=8448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01004217b92ba089d5f51a00000018000180140002006261746164765f736c6176655f31"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m30.081351349s ago: executing program 1 (id=8451): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m30.080929339s ago: executing program 39 (id=8451): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m27.776343339s ago: executing program 40 (id=8272): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x8, 0x7e, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x4100c0, 0x1}, 0x47) 1m12.819469981s ago: executing program 3 (id=8664): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x8, &(0x7f0000000280)={[{@usrquota}, {@data_err_ignore}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x5a}, 0x1, 0x0, 0x0, 0x40005}, 0x14) 1m12.741486672s ago: executing program 3 (id=8666): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x4}], 0x1, 0x400005aa, 0x0) 1m12.645228324s ago: executing program 3 (id=8667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000340)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$eJzs3V1v3FgZB/D/mZnMTLLQjQBVq6rbnKaslIoy9Uy2qUYBCeM5MzHMjEe2A4mEtCo0WUWddKEtEp2bNje8SMsHgLu94YILPsJKXHC13wKuQFqBkBArEDLysT2v9qRD0u6W/n/V7njsx+ccH7t+6sQ+BhEREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREUFYDcOoCrTt7u6ezGY1XKeTfMljZnlU2hKuRxPX59W5FNYLiPA/lMt4I5r9xpdGIRfD/63jcvTtMsrhRxmD1y6ubn+xkEvWn9Pg/wUWLfDh48G9O/3+wYNniM1DFy+wcC2fCuSeIailurbn2B2zpaTtObK+tWXc3Gl6smm3lbfv+aojLVflfMeVG9Z1Wa3XN6Wq7Du73VbDbKtk5u2v1gxjS36rFO1oABXP2rHbbbvb0jHh4jDmtnz/e1GAMjtSHh71DzbH2vMkrXPDoGpK43PjwWFQ7bTNrRm1WrVaq1W3btVv3TaMwswMIySMIcxEnPtBSy+Z8z2BE51Bzmr82/ijANooo4td7EGm/rHQgAsHnYzlsST/v3VTza13PP8nWX5ptPgSdP6/En27EqaFQkr+z2iLhNR5JG2JyJi/2J8lnagkHuIxBriHO+ijjwM8OIeyJeTamUsoGnFPnr01mFNSCwpd2PDgwEYHJlr4PGQ8R6KOLWzBwDvYQRMeJJqw0YaCh3148KHCI6oYlq9gwocDFxIbsHAdElXUUcfrkFCoYB8OdtFFCw2Y+GcQBIc40v2+GbfnaUpbkQRVMzawhEKyjQeozemJrPz//SfR2nH+N5j/X1XRcVCKPj6aF0P0GRDE1/8LWns+rSEiIiIiIiKi50Hon74L/Vv5NwEEaNptZYwtz/S73ItpIhERERERERGdkUBQwuXwMl/fffcmxOT1PxERERERERG9/IR+xk4AWNE39YvR41LP8kOA/AtoIhERERERERGdkb6//0oRCPSgFWsQC13/ExEREREREdFL4OdjY+wX8vEY+0Hya/0cgLU/lcSHfy3BXRInvb0vi2MzXGIexzEzdwD4zUviQjxQr/4oAtDfLHVZxLVJ4B/jowt8fJg+1v/TICKEcKcaUMxnDE8w3gAR1rxViL/hfVyNVrkajzN/d5CDXhKNKLzStNuqYjnt7SpM80LOV3v+j+8f/QRwh9t5eNQ/qPzgvf5d3ZaTcNbJcVjok4nm5NI7Y9SWR3q8Bf3MRdrbDZbRTKr8RbezInS9RrL9eZjHufGKMnfAr1a3t5aBaCt/ivVon60HUezKYDjivgDW9OAP1YreZRNb7y6JUSuq01uetiMytrysW3Etirm2cS36SPokLCcnyl/JA7XK7D6YaEVtvBWn94X421T/z28FRDnsi82wFb8PC5pqxXc/jFbe7O3Fo73Ob0XwejQ5fRQQEX1aDkdZSA9iPjPGfpIekpPas+adi6soAPFZLiO7j2oJ4vyRZPdHvw6iDJUHCvHvJtJrSfIKwjP6htDlFKMB3QuXUs7oRuWTIAjMC2WMn9H/EwTJBhkLZLeTIAimz+i/Hb0DKW72TCv+FQTBdlVnkl9OZdUPwhU+yKzXa9fyKKOER8c/1APgh949ePfgfq22uWW8bRi3aljS/1SIP/LI/BcIERG9uibfsZP2jj0dkZsTId7G1aiMq3f/8lY0NZHxvhDfUqDdBPp6qIH4FQJr6aWu4BBf/3t0G8KN6KoVWF+JPlcG8uLqdnhVO4w9EgX9hpcbmVd1OpdGsfr2htowNnnv0PQV4Ch28/nuBCIiohdsPSMPAxP5H5P5vzyR/29gI4rYuJR63b0ydkvhjeTqeHhJP3jtJDW2enrjv3HOnUFERPSKUO7HYsX/mXBdu/dOtV6vmv6Okq5jfVu6dqOlpN31lWvtmN2Wkj3X8R3Lacuei5K9rDzp7fZ6juvLpuPKnuPZe/rN7zJ+9bunOmbXty2v11amp6TldH3T8mXD9izZ2/1m2/Z2lKtX9nrKspu2Zfq205Wes+taqiKlp9RYoN1QXd9u2uFkV/Zcu2O6+/I7Tnu3o2RDeZZr93wnKjCpy+42Hbeji60gWPhFh0RERP+PHj4e3LvT7x88mJ5YDi/NozknyIiZnSimFJgHAo4TRERE9BkyStcLrFR+jg0iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqIZpz/St+DEUtrDgsBwzo8uxHPwFKNHDGfKEThrez5x/6AH9kuLKQKYt3pu0UqTRyIG9z6aE7w8nJN0/3jMySKVYhWYH/Ne9qI/fw54Tc9BNKdwjgfA7POj536MpU187TDq0awYvTB1UWm4Lwrn/9chnLj/m9lFIuz5IAiC+auXJvuwOGcDpyYKAB4U5+yC5VOOn9POHDPjfxPRS+a/AQAA//+63zmW") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) 1m12.381189748s ago: executing program 3 (id=8670): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0xfffffffffffffffc, &(0x7f0000000300)) 1m11.818471258s ago: executing program 3 (id=8673): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000200)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8850) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.log\x00', 0x10000, 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000300)={0x20000002}) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000021136e923a0360b9b55e684777a00000009000b0073797a30000000000900020073797a320000000014000000020a030000000000000000000000000714000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r8, 0x5606, 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200ba0150b54d58de2f00"/36], 0x50) 1m10.757334107s ago: executing program 3 (id=8684): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) 1m10.757014857s ago: executing program 41 (id=8684): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) 1m9.413872171s ago: executing program 6 (id=8713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000580)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) 1m8.509444567s ago: executing program 6 (id=8732): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, 0x0, 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x4}], 0x1, 0x400005aa, 0x0) 1m8.492667088s ago: executing program 6 (id=8733): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 1m8.320336531s ago: executing program 6 (id=8739): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") signalfd(r3, &(0x7f0000000840)={[0xe]}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='kfree\x00'}, 0x18) 1m7.382539607s ago: executing program 6 (id=8755): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="10", 0x1, 0x4000, &(0x7f0000000140)={0x11, 0x5, r0, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000102", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf251400000005000c0000000000080014000800000008000900ca0d00000800080007000000080017009700000008000d00ff0f00000800030001000000080009000300000008001400720e0000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x3, 0x36c, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") socket$packet(0x11, 0x3, 0x300) write$usbip_server(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028040000100240001006d6f6465000000000005000000000000000000000000000000000000000000000500030005000000100003000000000000006c656e63650020f5523c0ec9ef10336c94792dc97fdef23318c4ab6ecbaa17"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x20040084) 1m6.644754781s ago: executing program 6 (id=8760): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) 1m6.635704821s ago: executing program 42 (id=8760): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) 4.516834449s ago: executing program 4 (id=9944): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) syz_clone(0x44209400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001400000000000000010000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 4.356913262s ago: executing program 4 (id=9948): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000"], 0x28}}, 0x0) 4.355715932s ago: executing program 4 (id=9950): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb017918"], 0x0, 0x18, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="203200000000000084000000020000aeea5c0ca297f5dd4a64e301599ee2823019de41fd57e0000000000000000000000000000000d803086980f18a393eab5afe0a8e555710c33abb15f69facda3b782b2d17f7d8c1752a", @ANYRES32=0x0], 0x20, 0x2400e044}, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) lsm_get_self_attr(0x67, &(0x7f00000003c0)={0x0, 0x0, 0x71, 0x51, ""/81}, &(0x7f0000000440)=0x71, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 3.423038399s ago: executing program 4 (id=9975): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x51e, &(0x7f0000000740)="$eJzs3c9vG1kdAPDvOHZp2nSTBQ6wEsvCLkorqJ1s2N2Iw7JICE4rAcu9hMSJojhxFDu7TVRBKv4AJIQAiRNcuCDxByChSlw4IqRKcAYBAiFo4dADdNDY4zRN7cTtunEafz7SeN78ePN9z9aM5808zQQwsl6KiLci4n6aplciYjKfX8iH2GsP2Xp379xYzIYk0vSdfyaR5PM620ry8cU82/mI+NqXI76ZPBq3sbO7tlCrVbfy6UpzfbPS2Nm9urq+sFJdqW7Mzc2+Pv/G/GvzM4ezlp6knpci4s0v/vUH3/3Zl9781Wfe+9O1v1/+VlasiXz5wXo8puJRC9tVL7W+i4MZtp4w2GlUPPijjHdbY+yROTefcpkAAOguO8f/YER8MiKuxGSMHX06CwAAADyD0s9PxH+TiLS7cz3mAwAAAM+QQqsPbFIo530BJqJQKJfbfXg/HBcKtXqj+enl+vbGUruv7FSUCsurtepM3ld4KkpJNj3bSj+YfvXQ9FxEPB8R358cb02XF+u1pWFf/AAAAIARcfFQ+/8/k+32PwAAAHDGTA27AAAAAMBT11/7v+uTnQEAAIBnhPv/AAAAcKZ95e23syHtvP966d2d7bX6u1eXqo218vr2YnmxvrVZXqnXV1rP7Fs/bnu1en3zs7Gxfb0yHo1mpbGze229vr3RvLb60CuwAQAAgBP0/Mdv/SGJiL3PjbeGzLn+sva5GnBaFfdTST7uslv/8bn2+C8nVCjgRIwNuwDA0BSHXQBgaErDLgAwdMkxy3t23vltPv7EYMsDAAAM3vRHe9//LxyZc+/oxcCpZyeG0eX+P4yu1v3/fnvyOlmAM6XkDABG3vu+/3+sNH2sAgEAAAM30RqSQjm/vDcRhUK5HHGp9VqAUrK8WqvORMRzEfH7ydIHsunZVs7k2DYDAAAAAAAAAAAAAAAAAAAAAAAAANCWpkmkAAAAwJkWUfhb8uv2s/ynJ1+ZOHx94FxybzLyV4S+9+N3fnh9odncms3m/2t/fvNH+fxXh3EFAwAAAEbCY73Av9NO77TjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCQ7t65sdgZTjLuP74QEVPd4hfjfGt8PkoRceHfSRQP5EsiYmwA8cezj490i59kxdoP2Yk/dSD++ADi7908Mn5M5d9Ct/pfHEB8GGW3suPPW932v0K81Bp33/+KEQ9NP6nex7/YP/6N9dj/L/UZ44Xbv6j0jH8z4oVi9+NPJ37SI/7Lfcb/xtd3d3stS38SMd31/yd5KFalub5ZaezsXl1dX1iprlQ35uZmX59/Y/61+ZnK8mqtmn92jfG9j/3y/lH1v9Aj/tQx9X+lz/r/7/b1Ox9qJ0vd4l9+uUv83/w0X+PR+IX8v+9TeTpbPt1J77XTB73489+9eFT9l3rU/7jf/3Kf9b/y1e/8uc9VAYAT0NjZXVuo1apbZzaRtdJPQTEkTmHi2wPd4FikabZP9VwnW3gvTdPe20niNHwtrcSwj0wAAMCgPTjpH3ZJAAAAAAAAAAAAAAAAAAAAYHSdxOPEDsfc208lg3iENgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQPw/AAD//wHt1yc=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000280)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) close(r1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xa, 0x2004, @fd_index=0xa, 0x3ff, 0x0, 0x0, 0x3, 0x0, {0x1}}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x30) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x800086, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x110) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x1, r7, &(0x7f0000000540), 0x282d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)=r6}, 0x20) 3.3314286s ago: executing program 4 (id=9977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x89}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000104}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfffffffffffffd22, &(0x7f0000000680)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xa00, "bdc6368fc950d3b1dfa5555d89883b9bc7c2e5415e8f122066dc9ab1b86b8a41a7b20f54423228ccabd703336ff5fb6f4c4af02e0aa84eb16df035d38fa890fd422a9014ac86ce6ce775359f791e6f63c6e01b8fa76523d7fa0c3731f5b28db9e3aa5a22d9b95f64121d5639428ff04f2f5f0fa8bb76678333cffd2f2a27d081a5144082b5f741f57c49b076384376e3549e1aae2ede839d9ca19aa1b1f22f2461e0"}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3.227777322s ago: executing program 7 (id=9979): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x100}, 0x0, 0x0, 0x1, 0x0, 0x8000000000000000, 0x0, 0x559d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$eJzs3c1rHOUfAPDvbJK+/35NoRQVkUAPVmo3TeJLBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgnjXu8fiP+BfUdBCkRL04CUym9k0L7vJNt2ajfP5wITn2Znd5/nuzPfJMzuzbACFNZL9KUW8GBFfJRFHIyLJ1w1GvnJkZbulxzcnsyWJ5eWP/0ia22X11mu1nnc4r7wQEb98EXG6tLnd+sLiTKVaTefy+mhj9tpofWHxzJXZynQ6nV4dn5g49+bE+Dtvv9WzWF+7+Ne3H91//9yXJ5e++enhsbtJnI8j+bq1cTyDW2srIzGSvydDcX7DhmM9aKyfJLvdAXZkIM/zocjGgKMxkGc98N/3eUQsAwWVyH8oqNY8oHVu36Pz4D3j0XsrJ0Cb4x9c+WwkDjTPjQ4tJevOjLLz3eEetJ+18fPv9+5mS2z4HOJAD14foJNbtyPi7ODg5vEvyce/nTvbxTYb2yja/x/YTfez+c/r7eY/pdX5T7SZ/xxuk7s7sX3+lx72oJmOsvnfu23nv6sXrYYH8tr/mnO+oeTylWqajW3/j4hTMbQ/q291Pefc0oPlTuvWzv+yJWu/NRfM+/FwcP/650xVGpVniXmtR7cjXmo7/01W93/SZv9n78fFLts4kd57pdO67eN/vpZ/iHi17f5/ckUr2fr65GjzeBhtHRWb/XnnxK+d2t/t+LP9f2jr+IeTtddr60/fxvcH/k47rVsXf3R//O9LPmmW9+WP3ag0GnNjEfuSDzc/Pv7kua16a/ss/lMntx7/2h3/ByPi0y7jv3P8x5e7in+X9v/UU+3/py88+OCz7zq1393490azdCp/pJvxr9sOPst7BwAAAAAAAP2mFBFHIimVV8ulUrm8cn/H8ThUqtbqjdOXa/NXp6L5XdnhGCq1rnQfXXM/xFh+P2yrPr6hPhERxyLi64GDzXp5slad2u3gAQAAAAAAAAAAAAAAAAAAoE8c7vD9/8xvA7vdO+C585PfUFzb5n8vfukJ6Ev+/0NxyX8oLvkPxSX/objkPxSX/Ifikv9QXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvZsrz0+OZkVp+6vjA/U7t+Ziqtz5Rn5yfLk7W5a+XpWm26mpYna7PbvV61Vrs2Nh7zN0Ybab0xWl9YvDRbm7/auHRltjKdXkqH/pWoAAAAAAAAAAAAAAAAAAAAYG+pLyzOVKrVdE5BYUeFwf7oxp4vZNnYB91Y1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6A//BAAA//8iuzYD") r11 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r11, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000c1f0b18af023abf80864d34c923a867c926a761fef4c3e5401e81de20a3b163a6c0d9ac95152cb37f12229b7bb2e842013d2cfc4f50ae0e4250f8d6df4d86603fa5d333b2b7c7d", @ANYRES16=r4, @ANYBLOB="000129bd7000ffdbdf254c0000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x400c010) 3.044981956s ago: executing program 4 (id=9981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000580)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000480)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) 3.044496086s ago: executing program 43 (id=9981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000580)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000480)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) 2.357493178s ago: executing program 7 (id=9990): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) 2.25324589s ago: executing program 8 (id=9991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, 0x0, 0x0) 2.25268477s ago: executing program 8 (id=9992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) truncate(&(0x7f0000000640)='./file0\x00', 0x2) 2.24265619s ago: executing program 8 (id=9993): syz_io_uring_setup(0x7219, &(0x7f0000000280)={0x0, 0x1064, 0x80, 0x2, 0x224}, &(0x7f0000000040)=0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6963766c616e00180002800a000900000000000000000008000700f9ffffff08000500", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000028"], 0x20) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f4b0000000000005afd308329caace186dd4142623d991b4cc032688e75c5d400"/42, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1.273411967s ago: executing program 8 (id=10004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendto$inet(r0, &(0x7f0000000000)="1c000000000000", 0x7, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 1.249662837s ago: executing program 7 (id=10006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) 1.10418337s ago: executing program 7 (id=10007): r0 = getpgid(0x0) ptrace$getsig(0x4202, r0, 0x4, &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) msgget(0x1, 0x139) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x81fd) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, 0x0, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20080, &(0x7f00000003c0)={[{@dax}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@delalloc}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@norecovery}, {@quota}], [{@uid_gt}]}, 0x1, 0x557, &(0x7f0000001880)="$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") 629.041869ms ago: executing program 5 (id=10015): getpgid(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) gettid() ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20080, &(0x7f00000003c0)={[{@dax}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@delalloc}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@norecovery}, {@quota}], [{@uid_gt}]}, 0x1, 0x557, &(0x7f0000001880)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) 530.82208ms ago: executing program 5 (id=10016): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) 530.144931ms ago: executing program 5 (id=10017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) 473.483722ms ago: executing program 5 (id=10019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}}, 0x0) 372.446354ms ago: executing program 5 (id=10021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x89}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000104}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x498, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfffffffffffffd22, &(0x7f0000000680)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xa00, "bdc6368fc950d3b1dfa5555d89883b9bc7c2e5415e8f122066dc9ab1b86b8a41a7b20f54423228ccabd703336ff5fb6f4c4af02e0aa84eb16df035d38fa890fd422a9014ac86ce6ce775359f791e6f63c6e01b8fa76523d7fa0c3731f5b28db9e3aa5a22d9b95f64121d5639428ff04f2f5f0fa8bb76678333cffd2f2a27d081a5144082b5f741f57c49b076384376e3549e1aae2ede839d9ca19aa1b1f22f2461e0"}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 299.718344ms ago: executing program 0 (id=10022): r0 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x14, r0, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 269.193495ms ago: executing program 0 (id=10023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01020000000000"], 0x44}}, 0x0) 223.461896ms ago: executing program 0 (id=10024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) truncate(&(0x7f0000000640)='./file0\x00', 0x2) 218.785686ms ago: executing program 7 (id=10025): getpgid(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) gettid() ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20080, &(0x7f00000003c0)={[{@dax}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@delalloc}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@norecovery}, {@quota}], [{@uid_gt}]}, 0x1, 0x557, &(0x7f0000001880)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) 189.714136ms ago: executing program 0 (id=10026): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x291d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf823]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0900000200"/16], 0x10}}, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) (rerun: 64) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64090102}}}], 0x38}, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xfffffffb, 0x4, 0x8}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x9, 0xfff2}, {0x1, 0xd}, {0xfff1, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x2001) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000440)="2ef9df546dae5e352d9fe038498b4fb299382cba4e75d6461f6617f8a2a61835ab392111774a20da918b1640c783630f352e0c5aa2570593f60df05e4985d9ed15ec8e127bddf5cd85cde6edf70cfa0186f31be89484af774946c71791ebb4027d79038782b8e65d802d222b8cc31a52025c75576d35318b585636c1", 0x7c}, {&(0x7f0000000a00)="a8c067997f79b649417182582c848f20b3e22779b446297c32b826765f74d1c71df2434d3b8288baa4ec6ef17855da17f8154b120bd7db27abfda0f4b9c545ada06cf3970aa0067775712086c72e1e897ee955407d1c284fce675c2e684ec508f41aad3f860ae51c80e039ef13207c22a07e5b6b2c6587632d35efaef87a67ebb89030cf4cf0c4789ab6df3bb4b32a58958c8d939fdfc88d5d2dddf8b45153fddae61434481fed93a087eb1c80a73acc69cdedec80b1e8c997431328c9486c64c4fa7bf6c5b0c1", 0xc7}, {&(0x7f0000000900)="fc3454c7a33d4483c1acbdb1d210901c37e7cf5b82605532d61fe611574fd27db55ee11065065a6bd9211eec5c0096d317827f9ee32fcd09e5c613b1b95ebb6fed7187f75131045c4827ac8f732631c461862a18a33d6de0d02e00c4", 0x5c}, {&(0x7f0000000b80)="c13ccb8381a62ac629a42f2d4f301429c59fceb797c916086c47688c0c5e50ac2ac2f116bffdfca132aabc4d768307cada1a3177fa5098f91f96ec57bf1e8a9388775490b370f09b51ef7b6ece44bc1f5f6bff9df7deeb1be64be306e837fd06b994feea7bff286b8723d4016a93574ac67df886c52aae78f1cdd78adce3134f6c563609ec68c9dc26aca1227de37cc8e6891a3729b503cd6e31a50614e9b9f1735ecbe33e756dd044119670a42b96e97c624da6f7aaf3e2f6da5d92", 0xbc}, {&(0x7f0000000c80)="294ff17996eb091b31767ea48cb4b3a9039dc8193626b7adaa3ed1250f79bc20a118a74148db86748564ace15116ac7976601d3ebe630d1d348bd1f28f4777468b971d4deecb3eb6cf0a045e1024a9d15159dcf42f7bc7fc430e04ff4793c59d9e4e447288c5f16db8be80659521ac61068fe7065ff65faa522adc7812ae66c0698a774401f3fc481baea5b33ed6d3783613bbb2ad97b44516950c29fe27bd270bb2e6d7f1bf7ed9ac8ae8f3c07628294c76dcb3de12f59c8104ae80eef50df62659444042b8bb1c3efe071508623092bea35e1d6bdb07053dd8a7106ef9d4b809334ad867e9eec6b69ccfa53c1d35d60e0a5a0ad19e308ca63c84388681d5a3ebef383813203bd3046224c3ff503c2de0c9d7dd95179244e79b436c910c669b739be0db42ff6e24116e384d1cd5297eeb0277a4759ca22ab1c9e86d8e0fc77f8a067d55258ebe8f7e89bda8117659ce955e14d2abd0dba3bd2975dd802f1106d2e72cf376ae19ab2b1118eac65b457efb5abd31e410bc439ebd1bc98c42b01f873853498d890f02e7bf0aada61272e64ccac43f053ebe7fcac2d86cdde20501c86627e4784c666cdde0ab1596458f4a3469039201b4b19499a9868a266a3276a0cf7da68ef9436c96d29da7a085e265b545e4d7c8b90c4ccfaeefa266f8de9f61025f7d7cd6dba4fd1bc4c3f6badddba140315191fce8d842b6c53a2d5ff23741a162a5d04f96b652d0eafc295459607fce0288a56a5645c06d2b00eaabf25faac4459fc41e32ca6e9c9e11dbc2b16cb05c54d24ea1ca526287dc09922e6b992216986021d7ea48225cbcca63686c598ae522ea3fa59647cd2d54c6c550c4821e87d7abbdb5eb0d1a3bce029234d814a39a0162192e5cc4e9fd372764837be797a39b050c6a8542a74a9f6cdf39bb2680a47612ac9aa7438eb9b19af41d58fe7d6a18b30b44f48e8ace20e99087b4575aa45a56604049aa7be2e0f3a85be22e9878dc8b58f3216a53190f1cabd3cc390587d6dd9deda39596734aaf5506454bf02d89e5cac50227fa75622d793a7114b31cb50d15311cf13a0a45c2eab4e2e98d8717221110d594622aa985b155893fad1d5540b7c6ec18bb0051d9f2374b80b9c30e454060869544c78334631a3eb00308e1b17bcb246fa215ac0d0baf7bbba0fb35bcbb3c6781ef312c1826c8047aa47d216afe52649085a794434c390c5849c21d350b7b799aaaf1f05417027da44bf6656dc250fad2a85ea75f0ef8d04caf8475436288526e33214b53fc8d0166e90e4811a2ae95360c90b82d7ca6b8462dfef99ba06b2a26cd4b61c2114eecee5c923cc483e6e8b1b700aca118a28d863e8798d1057aeb75bb94cda64eeddade8855aac09b1437bf276fe29b5f5bf3537158d16367acef8a54a120f1c2c8ec9216b46d8f238945cce9d2e1400f7f3b397bda012e5a7b9dfad2e61fdc087afe1653901a19d7c2a56e3ee9b5d0f0e3cb290e2bc4e339fa3282eb59a8f15ed59c00c59d9bd7fe4cad5644336ae92d42ba9fb363865d875770228b66d9a3c7e98b1cfbd14cc7b8a314aa37b46c597819ff451c0622f2ba9509b66170a4be98a6998b264c4ac3a062c13908d6f2db00096128699196298cf41a686f47708221c06480a90456c3e42ddbb5f50f2ade826827247d826f69e88df7b793c85a1b96e800422b4fe8394136b2f75322122712d5d00a75343dfa796ff302ed85023ed5f1b631203feab2ff613ed572f3bb3129cad47182245bb72b2157df0ac6dbc2d51a8273f8e86b7efd0ff07d44063b150e1bc66afc2e6778d41817cf9b0abc72c7c3d696ded631616ea32519dcb2dac837eba8978f301c730df82cf9884d0660a3bc1dd0b1e50962d0dc90c8f63608fef8a4208c2e4f83669d0174a7cba660e3249e576dbb68709b8ea449ab2cd129c357a9d319a413f45dd78e3877d5e13a1dae0158ad637146d9b8a6adc5b7b34997f6e326524f35918a2427f705018b0a55f53eb965304a4212f5b064bc7d1b547b329d7b057cdfc011004caecae7212851a686e2cba19eed6dbc4d1e7d5f280ca754a24149054985f3b4bad15de94476292a907a1b00daa1ff4a73419b6195e51137a53e66b595834c3a52cf72f6be47b8bf2b31be80cb35fe66c057636fc2f458688e61af71f2830be92735bdc9a6c84c63fa0923fc39f2eb5ebcc9cfd047acd5145549151d76a737db5a18e1ada95928b612ca31ec39f0b88844b754686be865bc96108e298248700ec067e4691727cbc7e43737419bdfa6efe3cd5e79ade76f6360d7d248bd97ca162c9f1b914cad313e56c026a9bf2dcb207cfd76618ab12a017a2b67d828547fd4ea29991e60a4a86c92e4ecf0ea0d90d7d17d3b386b743798b0dd6dc8b7a7ca6965d3ef2357bf1c65beba77d6c8a679b514f6e57f537aa06aa6cbfed2c491a703c50480ed03e7a54dee2e67954f0d255575f4d933db1f76338bb8e3ac96042ef464dbb1e2d11707d19b26e76a0b5967791607c482219cc920e64fae41ef351e8b5d78eb2bc9de8a4069d18dfe5a2bc5429c1f88dfdbcddb2233057e5839346c5a52bfb755d28681c6cb866a540828a6981a2f8bd469db83f38b834c5648f11cd9df23c11a442dbe803e0a09769401457ffe3eabeaa52c36e68e4e3466a914b3be07b36968361fae3339f6b6a97a1f056e3c457bce6b15e41ce6ed4f56c6333ac34d7685c367ea55e71e4bdd4ce18a255b64b31fcf275f9c4d8d1f123b7350aa914b7848e2984f99d6ef1e99d53852366eb211ffc04c1b17c538d75e8aca267d07ee8ccbc6b97129a2c3532f70189e494db18bbc33379add8873417d9d27d9314c4d7af5643d3115b5edf0e92defa8f9de582159cc374d4aa44da1a2c62a1d59b328e0eee6aa73424f03b2f14d2e5df16caadbd7133870332d81b3d6d6834ee08014f908cd5605f76c9c4f0659fa397ee09cee204c3ae3bd2605313b00d85563f9688d26491c219aae244904178b4657dd314292840f9c964de1ee7cfcfaa0ea6db4bc0751b3f29031efb14b6d5995737088d783b0140b34047d4e142c50b2fb60871df2252894cbf7e618da89477ebb7f7ba1def0accda6ecf8ad7460945298e6c3491d36f7f2268184c461ae1b19408d5fa9f2f6c908b2f9adc267576d0369620ecea24c6e7e596d865f801eb79546fa0464ed5678e472a4ce2a2c57c5987233774aa91cd7df06706d603167aab7b102ca88b361d975c9c6925ab9a0d5b9125fb14844b18c53b2095ec4776b6da3d36eaa0d5f42614bdee81b0284b5ded660b7702ac8dbfaddbe215be94826e3a9a45574ed2ce4eccc38832480fc9d5e282de3bc4dd1f26442b5594dec9b46593fcf79012d0f48e6e54281fed28bf34caad2b5551c6e5c6299ddff1e6eecd628bfe2878c3d9be31f8f15c4376e0984a2c6efc5303f2c553796d2008ae7a31d55f74a169013f25b00ab87577a336e227a63589aa23dbc221e6a4de5f601230861dad197246e34c2632dd8b4d0b82b0bc2ced84740c8122816783cebf0646be2767371a5a7899c0e61529b405bd6b54751f15893708a275540cecc91efab770ee1eaf4d7e69619d17c742c948f809ba4b75549fc7b136a4bb0734bb9e42c2ff1f20b28c470b10991cca319ebe0bd4f4191ebabc1fa76d419b38beea13c4a729d53272411422c5eff75d7663162d887700015f6f1d06a526a15028225740daeeb4657068605161a083fafe603faefb3c664b3f3f75af013babb29354634ef20b9513e167c902d30a6cd95c75fb2f5457024083ff681950bf1e917fbb1143dc803be20a68bb4518c6738f4bdd731c6e87b72b9f0b3a3b65d0e7d9b5aaba17f4bfa69d24089dc35c1cbbeb4b82fd372fe1ea84b4886532cbfe7b5f45fc8661b2684a0353f611ec47927344a7cb93a0491bc9472d3f9c29aafc4a22d4a81583560fdc50d71d4354f7bd322e7bac43e630b0c6079d0b72003cd11c3a2f5b159f12fb7bef7e3a8a66d093354636cf97c4b839df55b6d369212fe770f25119f4a61dc06d7d8e5b025e8cc4dfd262fbdcc68a13835c65b9b5cec4935df7c47d49193403227b117c07983cb2ce0dfc8157f2dad83a458b6b8ce4ac7a65bf1b845c7715b206937229e05ba32740699125148b8a5fe8fb2f587a758082a848bb62249fb1b291ac85eb4e4ae79f8be219a1f3210da262beb0463d98543f0a9ee4e0ac4cd0d42bb4133f1e0b2fe43f3bf1d587e2c7297a53b8796a64a9223659cb3d69ec04926dd8bd3d5c4ee10de77cab8963670a0c84a8ffb70a04b19b1be074b07a1dd21e6b3df88630cb4f6b0702984c4b5c758db601da71411f172993e70cdb0c6616c6ce63211f52554c6313e9c56c66a84fcf185973f2471b9961fab904e5c5ee82dfa10670015c02f2160caaa666c7600a82df8306b563a4d3d0d1bc9b71f68437783222a9d423176bdc5aa0c10d7542d38f78770ae92d4e3cf7c9f2c99ad41af1fa08ecd1c276ad8db944a75dd980217b3ec0b15f81c15dad3e6fff53a4e9bbb56f926b3c438b405587e02ebbd19fbd06b1c3e10ba2e1e37198ffa40470f2de0fc207d3272097af38e83a08ff148fa789371f5af388de2f46db96c290551489ee5c4d6bcb817c3d6f15fb92cfb65cce4316e2e1d82546acfe0f9f5727cccd3fe735ee9f11bafc12db252a57bde7ccd895994a0a3922b1a69c3734ccad5254300c2c2ada1a78349d2bc314df69fa023c47f15b82fb86421e53c7b259e64bde190089c27c5f85ee8ebe1cb6a284a8961efa4c16ce360c3af6ff4c38e142cbfa2d6fd6e3a6904a0a6b5205ff5d68ef582744fd7fdf3e1be46ff878068a0bd69c884e4f7ef6a195500dd1723df0c2615f8c54c14fbfc03af3a694febba5b1527f9de1e8ac4f1c51e05e127d10c2fb206b73df38bbf814e2024fe3b37fb4abf4fad3b0293cd55d133b1ea64f96ec355c73dda63a17934eb4153429aea7458d4b9ba5598fda9174e3d47146974537e7a4e09ed9d7576cb43606fcc0075eb704e4461e80d4b368cd16702e4c79e1b9092aeddae259f4aee54f435051e5b40f485a34adbcc15d5d39573de19acb73369235351b69867fd34374dcedcf621cd00cd3e616dea5da08c047d5331c3b446de349a2d8259522c233599a9019ca0d2b52fec6783d657a1f4476c78a52064ed12d9e286fab25d8ce27d1592184e5fd0c2875457efe1360a0ee807130d31c61cbf6627eec5756a8f2f8e8a0e96fdc3b42e6884fd26bf5c7cfc11c3df5bc9199520c78b27a20c16bb3048ff6b43ef439bc44e1b492ec016b65dc48096e1c3e5430c21147de53389037be8a61780660326077097765d7bf26e965b56192fd6e45f51f1d7d06d41a412a13463171bfb68698dcd150960e7c3293a03f865c84b0360a9894915cc044b5cf0bbf09e1b73c1df62a0bf8ed9cfa2d2bdf8cee7c388beeb323c7f1bdd4cc1c40d6077684bd319e038ba6bf2377a6e23b64bfb23bf3caf4dc866992292db197b23e16f4c342ab926c2ab0799a1e1434447d2f7c65b54421bb132fc76c01776fb331f62d53b196c2fc2381ce249bd5fff3366c7e84f499c566f63ab19d7049a65c37309ec50885764807c48b8f6629d30878d7676f06168ebfeb7ca73a1e82c40dcbfc133d31e572dc2df696224104780bfd1efb58ca2e51929bad18f9906bd09971b0a801e622c850175ea9862dd22f41dd0e8832fa446104d1d685dc37276ef724596bf681a903f7479ebb5eef80696d8bf3a443fec08981b948453", 0xffe}, {&(0x7f0000001c80)="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", 0xc54}], 0x6}, 0x4) (async) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, 0x0, 0x0) (async, rerun: 64) sendmsg$AUDIT_SIGNAL_INFO(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd25, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4d090}, 0x80) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 113.284868ms ago: executing program 8 (id=10027): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 112.280768ms ago: executing program 7 (id=10028): syz_io_uring_setup(0x7219, &(0x7f0000000280)={0x0, 0x1064, 0x80, 0x2, 0x224}, &(0x7f0000000040)=0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6963766c616e00180002800a000900000000000000000008000700f9ffffff08000500", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000028"], 0x20) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f4b0000000000005afd308329caace186dd4142623d991b4cc032688e75c5d400"/42, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$eJzs3b9uUmEUAPBDS/ljHLqZmJhc46BToz5BjamJkcSkhkG3JnYqEyzA0j6Gr+B7+QCmE4v5DF5uQUoRiRe0/n5LTznfufc73HBh4ZAi9+Xep2g0KrFzGIcxqsR+7EThIgCA22SUUnxNud+vrpaxJQCgZCu8/3/b8JYAgJK9e//hzYtW6+g4yxoRlxf9dr+d/83zr163jp5mP+xPqy77/fbuVf5ZNv/ZYZzfizuT/PO8PrtK1yKiXYsnj/L8OPfybSv7ub4eH0vuHQAAAAAAAAAAAAAAAAAAAAAAtuVBZIWF830ODubzzUk+/29mPtDc/J5q3C/GA0/HA6XzTTQFAAAAAAAAAAAAAAAAAAAA/5jeYHh20umcdqdBPSJmH6kuWHNzUJkceKXF2w92Yr3y5qTNNU5amTxF5TbYXHxxVwmi+rdcnXWD7E8dsF5c5uupZlSWlKc0Dha/CoqxGDeW1yJi+cYeH6/b1yil1Pn8sNsbRFq6eHqPqG/sbgQAAAAAAAAAAAAAAAAAAP+3mW99X9PY3caOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDzeoNh8Sv/w7OTTue02xusHJxHxN345eLiXHvR2F6jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GrfAwAA//8nTRyq") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 102.974408ms ago: executing program 8 (id=10029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x89}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000104}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xfffffffffffffd22, &(0x7f0000000680)={@link_local, @dev, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xa00, "bdc6368fc950d3b1dfa5555d89883b9bc7c2e5415e8f122066dc9ab1b86b8a41a7b20f54423228ccabd703336ff5fb6f4c4af02e0aa84eb16df035d38fa890fd422a9014ac86ce6ce775359f791e6f63c6e01b8fa76523d7fa0c3731f5b28db9e3aa5a22d9b95f64121d5639428ff04f2f5f0fa8bb76678333cffd2f2a27d081a5144082b5f741f57c49b076384376e3549e1aae2ede839d9ca19aa1b1f22f2461e0"}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) 90.578008ms ago: executing program 0 (id=10030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) 1.4866ms ago: executing program 0 (id=10031): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000200)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000050004000000000009"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8850) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.log\x00', 0x10000, 0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000300)={0x20000002}) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000021136e923a0360b9b55e684777a00000009000b0073797a30000000000900020073797a320000000014000000020a030000000000000000000000000714000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_ACTIVATE(r8, 0x5606, 0x1000) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000200ba0150b54d58de2f00"/36], 0x50) 0s ago: executing program 5 (id=10032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newtfilter={0x1f8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c0, 0x2, [@TCA_FLOWER_ACT={0x1bc, 0x3, [@m_tunnel_key={0x1b8, 0x0, 0x0, 0x0, {{0xf}, {0x9c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fff}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x8, 0x4, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x7, 0x5, 0x1ff, 0x8}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x10000, 0x9, 0x3, 0x6, 0x8}, 0x1}}]}, {0xed, 0x6, "b659fb16ffd6d2fde92231a00e2ccbb9a3b7b66d0e112599109a987ff9de1adc0ac08f28ae1bb4b6e57058f06fc3b04deff8678e9ae07b3e8f19c9092d6ff6ce50f8de5bffbab31e68d87ef39cbc3430d88c0df197ceff9b0840e7910a6d960220e312192ec74bbc9f0ed1c23c9c90a97ae6fe011eb526fed948331873df2d2b3dcec23ffd0d6d839fed5daf74959c2b2aa781cd1a2f9c42a44b578ffa259ee86527b07c2a919a86615e95209aa26219df2ab4fd4508e216e192b03b4a160755ea6d42b36f6da24f8e305d079f8b552e5a4f318eaab074332f968cbf43c7838ff2b6df86c1a54d4b2d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): value: 360287970189639690 [ 549.117312][T30493] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.9108: Bad quota inode: 15, type: 2 [ 549.128720][T30493] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 549.143885][T30493] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 549.154410][T30493] EXT4-fs error (device loop8): ext4_lookup:1787: comm syz.8.9108: inode #15: comm syz.8.9108: iget: illegal inode # [ 549.345093][T30506] loop7: detected capacity change from 0 to 1024 [ 549.388191][T24178] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:46: bg 0: block 393: padding at end of block bitmap is not set [ 549.403458][T24178] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 549.416259][T24178] EXT4-fs (loop7): This should not happen!! Data will be lost [ 549.416259][T24178] [ 549.468401][T30512] netlink: 'syz.8.9110': attribute type 13 has an invalid length. [ 549.509446][T30517] loop7: detected capacity change from 0 to 512 [ 549.528301][T30517] EXT4-fs (loop7): 1 orphan inode deleted [ 549.544626][T24138] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 549.566290][T30512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.806744][T30525] loop5: detected capacity change from 0 to 512 [ 549.816247][T30525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 549.824658][T30525] EXT4-fs (loop5): orphan cleanup on readonly fs [ 549.833150][T30525] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.9120: iget: bad i_size value: 360287970189639690 [ 549.846926][T30525] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9120: Bad quota inode: 15, type: 2 [ 549.911022][T30525] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 549.997312][T30533] loop4: detected capacity change from 0 to 164 [ 550.005788][T30525] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 550.019807][T30533] iso9660: Unknown parameter 'HNy$ÔÆd öí%D >ÜZ¹×Zˆ›ßf[úš{bôDq' [ 550.052034][T30525] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.9120: inode #15: comm syz.5.9120: iget: illegal inode # [ 550.272868][T30551] SELinux: failed to load policy [ 550.285411][T30550] loop7: detected capacity change from 0 to 1024 [ 550.304460][T30554] loop8: detected capacity change from 0 to 512 [ 550.306920][T30550] netlink: 'syz.7.9127': attribute type 3 has an invalid length. [ 550.318752][T30557] loop4: detected capacity change from 0 to 512 [ 550.367609][T30554] EXT4-fs (loop8): 1 orphan inode deleted [ 550.378574][T24160] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 550.412054][T30557] wireguard2: entered promiscuous mode [ 550.417663][T30557] wireguard2: entered allmulticast mode [ 550.458129][T30572] loop8: detected capacity change from 0 to 512 [ 550.642049][T30590] loop8: detected capacity change from 0 to 1024 [ 550.679340][T30590] netlink: 'syz.8.9142': attribute type 3 has an invalid length. [ 550.712296][T30595] loop8: detected capacity change from 0 to 1024 [ 550.758927][T30595] netlink: 'syz.8.9143': attribute type 3 has an invalid length. [ 550.786543][T30599] netlink: 'syz.7.9140': attribute type 13 has an invalid length. [ 550.825875][T30599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 551.124187][T30621] netlink: 'syz.0.9154': attribute type 3 has an invalid length. [ 551.164412][T30624] loop8: detected capacity change from 0 to 164 [ 551.181578][T30624] iso9660: Unknown parameter 'HNy$ÔÆd öí%D >ÜZ¹×Zˆ›ßf[úš{bôDq' [ 551.600676][T30653] loop4: detected capacity change from 0 to 1024 [ 551.602041][T30654] loop5: detected capacity change from 0 to 164 [ 551.628547][T30654] iso9660: Unknown parameter 'HNy$ÔÆd öí%D >ÜZ¹×Zˆ›ßf[úš{bôDq' [ 551.651726][T30657] loop8: detected capacity change from 0 to 512 [ 551.690861][T30657] wireguard2: entered promiscuous mode [ 551.696421][T30657] wireguard2: entered allmulticast mode [ 551.929527][T30678] loop5: detected capacity change from 0 to 1024 [ 552.017808][T30685] loop7: detected capacity change from 0 to 164 [ 552.024710][T30685] iso9660: Unknown parameter 'HNy$ÔÆd öí%D >ÜZ¹×Zˆ›ßf[úš{bôDq' [ 552.307589][T30696] netlink: 'syz.7.9182': attribute type 13 has an invalid length. [ 552.366892][T30696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.404460][T30702] wireguard2: entered promiscuous mode [ 552.410129][T30702] wireguard2: entered allmulticast mode [ 552.494648][T30710] loop4: detected capacity change from 0 to 512 [ 552.686946][T30716] loop4: detected capacity change from 0 to 512 [ 552.847100][T30719] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.9190: iget: bad i_size value: 2533274857506816 [ 552.898373][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 552.898474][ T29] audit: type=1326 audit(10486310.533:82579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.4.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740f81e9a9 code=0x7ffc0000 [ 552.941942][ T29] audit: type=1326 audit(10486310.562:82580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.4.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f740f81e9a9 code=0x7ffc0000 [ 552.965678][ T29] audit: type=1326 audit(10486310.562:82581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.4.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740f81e9a9 code=0x7ffc0000 [ 552.989356][ T29] audit: type=1326 audit(10486310.562:82582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.4.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f740f81e9a9 code=0x7ffc0000 [ 553.004130][T30728] SELinux: failed to load policy [ 553.012796][ T29] audit: type=1326 audit(10486310.562:82583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.4.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740f81e9a9 code=0x7ffc0000 [ 553.041504][ T29] audit: type=1326 audit(10486310.562:82584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30715 comm="syz.4.9190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740f81e9a9 code=0x7ffc0000 [ 553.101114][ T29] audit: type=1326 audit(10486310.737:82585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30730 comm="syz.5.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 553.155650][ T29] audit: type=1326 audit(10486310.737:82586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30730 comm="syz.5.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 553.179301][ T29] audit: type=1326 audit(10486310.737:82587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30730 comm="syz.5.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 553.203145][ T29] audit: type=1326 audit(10486310.737:82588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30730 comm="syz.5.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 553.232674][T30738] loop4: detected capacity change from 0 to 1024 [ 553.566605][T30754] loop7: detected capacity change from 0 to 512 [ 553.593691][T30755] __nla_validate_parse: 22 callbacks suppressed [ 553.593760][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.609070][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.619895][T30754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 553.634289][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.659774][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.668807][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.684127][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.728627][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.737713][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.755650][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9203'. [ 553.776816][T30769] SELinux: failed to load policy [ 553.993966][T30759] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 554.032117][T30777] loop4: detected capacity change from 0 to 1024 [ 554.055518][T30777] netlink: 'syz.4.9211': attribute type 3 has an invalid length. [ 554.219914][T30785] loop4: detected capacity change from 0 to 1024 [ 554.247146][T30785] netlink: 'syz.4.9213': attribute type 3 has an invalid length. [ 554.331932][T30793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.342947][T30793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.370096][T30793] loop4: detected capacity change from 0 to 4096 [ 554.708620][T30814] loop5: detected capacity change from 0 to 1024 [ 554.823104][T30819] loop8: detected capacity change from 0 to 1024 [ 554.833361][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9224'. [ 554.852232][T30819] netlink: 'syz.8.9225': attribute type 3 has an invalid length. [ 555.045782][T30839] loop4: detected capacity change from 0 to 512 [ 555.104317][T30839] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.9231: iget: bad i_size value: 2533274857506816 [ 555.491726][T30856] loop7: detected capacity change from 0 to 1024 [ 555.508068][T30856] netlink: 'syz.7.9237': attribute type 3 has an invalid length. [ 555.536097][T30860] loop5: detected capacity change from 0 to 512 [ 555.540714][T30862] loop7: detected capacity change from 0 to 1024 [ 555.595366][T24180] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:48: bg 0: block 393: padding at end of block bitmap is not set [ 555.611292][T24180] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 555.623911][T24180] EXT4-fs (loop7): This should not happen!! Data will be lost [ 555.623911][T24180] [ 555.765842][T30875] loop5: detected capacity change from 0 to 512 [ 555.837606][T30875] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.9243: iget: bad i_size value: 2533274857506816 [ 555.953208][T30895] loop5: detected capacity change from 0 to 512 [ 556.183332][T30922] loop5: detected capacity change from 0 to 512 [ 556.250026][T30922] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.9259: iget: bad i_size value: 2533274857506816 [ 556.347631][T30935] SELinux: failed to load policy [ 556.381691][T30938] loop5: detected capacity change from 0 to 512 [ 556.623889][T30956] loop4: detected capacity change from 0 to 512 [ 556.635331][T30956] bridge0: port 1(syz_tun) entered blocking state [ 556.642010][T30956] bridge0: port 1(syz_tun) entered disabled state [ 556.650130][T30956] syz_tun: entered allmulticast mode [ 556.656204][T30956] syz_tun: entered promiscuous mode [ 556.662497][T30956] bridge0: port 1(syz_tun) entered blocking state [ 556.669068][T30956] bridge0: port 1(syz_tun) entered forwarding state [ 556.682258][T30956] syz_tun: left allmulticast mode [ 556.687465][T30956] syz_tun: left promiscuous mode [ 556.692634][T30956] bridge0: port 1(syz_tun) entered disabled state [ 557.252094][T30995] bridge0: port 1(syz_tun) entered blocking state [ 557.258692][T30995] bridge0: port 1(syz_tun) entered disabled state [ 557.265737][T30995] syz_tun: entered allmulticast mode [ 557.272194][T30995] syz_tun: entered promiscuous mode [ 557.277947][T30995] bridge0: port 1(syz_tun) entered blocking state [ 557.284592][T30995] bridge0: port 1(syz_tun) entered forwarding state [ 557.298120][T30995] syz_tun: left allmulticast mode [ 557.303343][T30995] syz_tun: left promiscuous mode [ 557.308532][T30995] bridge0: port 1(syz_tun) entered disabled state [ 557.494577][T31004] netlink: 'syz.4.9288': attribute type 13 has an invalid length. [ 557.527738][T31004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.791584][T31015] loop5: detected capacity change from 0 to 512 [ 557.823243][T31017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.831818][T31017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.004493][T31010] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.9291: iget: bad i_size value: 2533274857506816 [ 558.028179][ T29] kauditd_printk_skb: 2037 callbacks suppressed [ 558.028197][ T29] audit: type=1326 audit(10486315.530:84626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.058400][ T29] audit: type=1326 audit(10486315.530:84627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.081960][ T29] audit: type=1326 audit(10486315.530:84628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.105415][ T29] audit: type=1326 audit(10486315.530:84629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.128966][ T29] audit: type=1326 audit(10486315.530:84630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.152437][ T29] audit: type=1326 audit(10486315.530:84631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.175943][ T29] audit: type=1326 audit(10486315.530:84632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.199442][ T29] audit: type=1326 audit(10486315.530:84633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.222972][ T29] audit: type=1326 audit(10486315.530:84634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.246450][ T29] audit: type=1326 audit(10486315.530:84635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30990 comm="syz.8.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86293ae9a9 code=0x7fc00000 [ 558.340754][T31003] Set syz1 is full, maxelem 65536 reached [ 558.376991][T31025] loop4: detected capacity change from 0 to 512 [ 558.417710][T31029] loop7: detected capacity change from 0 to 1024 [ 558.491233][T31029] netlink: 'syz.7.9297': attribute type 3 has an invalid length. [ 558.502636][T31038] loop8: detected capacity change from 0 to 512 [ 558.534155][T31038] bridge0: port 1(syz_tun) entered blocking state [ 558.540735][T31038] bridge0: port 1(syz_tun) entered disabled state [ 558.550430][T31038] syz_tun: entered allmulticast mode [ 558.556656][T31038] syz_tun: entered promiscuous mode [ 558.562496][T31038] bridge0: port 1(syz_tun) entered blocking state [ 558.569112][T31038] bridge0: port 1(syz_tun) entered forwarding state [ 558.587958][T31038] syz_tun: left allmulticast mode [ 558.593203][T31038] syz_tun: left promiscuous mode [ 558.598638][T31038] bridge0: port 1(syz_tun) entered disabled state [ 558.687060][T31052] SELinux: failed to load policy [ 558.712613][T31054] SELinux: failed to load policy [ 558.753859][T31057] SELinux: failed to load policy [ 558.863222][T31066] loop7: detected capacity change from 0 to 1024 [ 558.945022][T31066] netlink: 'syz.7.9311': attribute type 3 has an invalid length. [ 558.958061][T31077] loop5: detected capacity change from 0 to 1024 [ 559.004121][T31075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.013385][T31075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.040805][T31080] __nla_validate_parse: 23 callbacks suppressed [ 559.040820][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9317'. [ 559.042967][T31084] loop4: detected capacity change from 0 to 512 [ 559.047504][T31080] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9317'. [ 559.062542][T31084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 559.073102][T24180] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:48: bg 0: block 393: padding at end of block bitmap is not set [ 559.101800][T24180] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 559.114673][T24180] EXT4-fs (loop5): This should not happen!! Data will be lost [ 559.114673][T24180] [ 559.148262][T31091] SELinux: failed to load policy [ 559.350272][T31109] loop8: detected capacity change from 0 to 512 [ 559.428921][T31109] wireguard3: entered promiscuous mode [ 559.434498][T31109] wireguard3: entered allmulticast mode [ 559.453039][T31114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.462039][T31114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.493517][T31114] loop5: detected capacity change from 0 to 4096 [ 559.748804][T31106] Set syz1 is full, maxelem 65536 reached [ 559.797867][T31132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9336'. [ 559.807601][T31132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9336'. [ 559.816857][T31133] loop7: detected capacity change from 0 to 1024 [ 559.905139][T31141] netlink: 'syz.0.9340': attribute type 3 has an invalid length. [ 559.936099][T31145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9342'. [ 560.024738][T31158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9348'. [ 560.034347][T31158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9348'. [ 560.086774][T31164] SELinux: failed to load policy [ 560.275458][T31170] loop8: detected capacity change from 0 to 128 [ 560.301556][T31171] netlink: 'syz.4.9350': attribute type 13 has an invalid length. [ 560.394188][T31171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.414757][T31176] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9355'. [ 560.642887][T31181] bio_check_eod: 96 callbacks suppressed [ 560.642908][T31181] syz.8.9353: attempt to access beyond end of device [ 560.642908][T31181] loop8: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 560.664554][T31181] syz.8.9353: attempt to access beyond end of device [ 560.664554][T31181] loop8: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 560.688522][T31181] syz.8.9353: attempt to access beyond end of device [ 560.688522][T31181] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 560.703548][T31181] syz.8.9353: attempt to access beyond end of device [ 560.703548][T31181] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 560.718884][T31181] syz.8.9353: attempt to access beyond end of device [ 560.718884][T31181] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 560.735007][T31181] syz.8.9353: attempt to access beyond end of device [ 560.735007][T31181] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 560.762231][T31181] syz.8.9353: attempt to access beyond end of device [ 560.762231][T31181] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 560.777926][T31181] syz.8.9353: attempt to access beyond end of device [ 560.777926][T31181] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 560.807173][T31192] loop5: detected capacity change from 0 to 1024 [ 560.830507][T31181] syz.8.9353: attempt to access beyond end of device [ 560.830507][T31181] loop8: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 560.846569][T31181] syz.8.9353: attempt to access beyond end of device [ 560.846569][T31181] loop8: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 561.084619][T31196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9361'. [ 561.158866][T31201] loop7: detected capacity change from 0 to 512 [ 561.168072][T31208] loop5: detected capacity change from 0 to 128 [ 561.186623][T31206] loop8: detected capacity change from 0 to 512 [ 561.208087][T31201] wireguard1: entered promiscuous mode [ 561.213681][T31201] wireguard1: entered allmulticast mode [ 561.278499][T31214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.347592][T31214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.356015][T31206] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.9365: iget: bad i_size value: 2533274857506816 [ 561.419721][T31214] loop4: detected capacity change from 0 to 4096 [ 561.556044][T31226] loop8: detected capacity change from 0 to 1024 [ 561.581477][T31226] netlink: 'syz.8.9369': attribute type 3 has an invalid length. [ 561.592625][T31225] wireguard3: entered promiscuous mode [ 561.598229][T31225] wireguard3: entered allmulticast mode [ 561.673655][T31203] Set syz1 is full, maxelem 65536 reached [ 561.785534][T31235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.794382][T31235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.825475][T31235] loop8: detected capacity change from 0 to 4096 [ 562.106653][T31232] Set syz1 is full, maxelem 65536 reached [ 562.126972][T31239] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9374'. [ 562.190645][T31245] loop5: detected capacity change from 0 to 512 [ 562.200566][T31245] bridge0: port 1(syz_tun) entered blocking state [ 562.207290][T31245] bridge0: port 1(syz_tun) entered disabled state [ 562.214314][T31245] syz_tun: entered allmulticast mode [ 562.220190][T31245] syz_tun: entered promiscuous mode [ 562.226060][T31245] bridge0: port 1(syz_tun) entered blocking state [ 562.232559][T31245] bridge0: port 1(syz_tun) entered forwarding state [ 562.247853][T31245] syz_tun: left allmulticast mode [ 562.253023][T31245] syz_tun: left promiscuous mode [ 562.258248][T31245] bridge0: port 1(syz_tun) entered disabled state [ 562.269045][T31247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.277559][T31247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.290983][T31249] SELinux: failed to load policy [ 562.327792][T31243] loop7: detected capacity change from 0 to 4096 [ 562.519779][T31257] loop5: detected capacity change from 0 to 512 [ 562.530487][T31261] loop4: detected capacity change from 0 to 512 [ 562.548375][T31241] Set syz1 is full, maxelem 65536 reached [ 562.560435][T31257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 562.560930][T31261] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 562.578800][T31261] EXT4-fs (loop4): orphan cleanup on readonly fs [ 562.586643][T31261] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.9378: iget: bad i_size value: 360287970189639690 [ 562.601647][T31261] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.9378: Bad quota inode: 15, type: 2 [ 562.615896][T31261] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 562.632264][T31261] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 562.642209][T31268] wireguard4: entered promiscuous mode [ 562.648069][T31268] wireguard4: entered allmulticast mode [ 562.663842][T31253] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.9378: inode #15: comm syz.4.9378: iget: illegal inode # [ 562.703173][T31271] loop8: detected capacity change from 0 to 128 [ 562.793320][T31278] SELinux: failed to load policy [ 562.866612][T31285] loop4: detected capacity change from 0 to 512 [ 562.878806][T31285] bridge0: port 1(syz_tun) entered blocking state [ 562.885677][T31285] bridge0: port 1(syz_tun) entered disabled state [ 562.892375][T31285] syz_tun: entered allmulticast mode [ 562.898356][T31285] syz_tun: entered promiscuous mode [ 562.904024][T31285] bridge0: port 1(syz_tun) entered blocking state [ 562.910574][T31285] bridge0: port 1(syz_tun) entered forwarding state [ 562.924213][T31285] syz_tun: left allmulticast mode [ 562.929369][T31285] syz_tun: left promiscuous mode [ 562.934493][T31285] bridge0: port 1(syz_tun) entered disabled state [ 563.321933][T31295] netlink: 'syz.7.9390': attribute type 13 has an invalid length. [ 563.341194][T31295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.768412][ T29] kauditd_printk_skb: 555 callbacks suppressed [ 563.768432][ T29] audit: type=1326 audit(12059185.177:85191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.798443][ T29] audit: type=1326 audit(12059185.177:85192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.822000][ T29] audit: type=1326 audit(12059185.177:85193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.829535][T31311] SELinux: failed to load policy [ 563.845492][ T29] audit: type=1326 audit(12059185.177:85194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.874191][ T29] audit: type=1326 audit(12059185.177:85195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.897930][ T29] audit: type=1326 audit(12059185.177:85196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.921535][ T29] audit: type=1326 audit(12059185.177:85197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.945410][ T29] audit: type=1326 audit(12059185.177:85198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.969063][ T29] audit: type=1326 audit(12059185.177:85199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 563.969896][T31314] loop8: detected capacity change from 0 to 1024 [ 563.993083][ T29] audit: type=1326 audit(12059185.177:85200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31303 comm="syz.0.9396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb701b9e9a9 code=0x7ffc0000 [ 564.082427][T31314] EXT4-fs mount: 144 callbacks suppressed [ 564.082448][T31314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.139126][T31321] loop7: detected capacity change from 0 to 512 [ 564.149335][T31314] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.167120][T31321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.193741][T31321] bridge0: port 3(syz_tun) entered blocking state [ 564.200319][T31321] bridge0: port 3(syz_tun) entered disabled state [ 564.211863][T31328] loop5: detected capacity change from 0 to 512 [ 564.219019][T31321] syz_tun: entered allmulticast mode [ 564.224999][T31321] syz_tun: entered promiscuous mode [ 564.230662][T31321] bridge0: port 3(syz_tun) entered blocking state [ 564.231404][T31314] netlink: 'syz.8.9399': attribute type 3 has an invalid length. [ 564.237190][T31321] bridge0: port 3(syz_tun) entered forwarding state [ 564.262877][T31321] syz_tun: left allmulticast mode [ 564.266804][T31328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.268033][T31321] syz_tun: left promiscuous mode [ 564.268244][T31321] bridge0: port 3(syz_tun) entered disabled state [ 564.292298][T31333] loop4: detected capacity change from 0 to 1024 [ 564.321040][T31321] bridge_slave_0: left allmulticast mode [ 564.327031][T31321] bridge_slave_0: left promiscuous mode [ 564.332900][T31321] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.342736][T31321] bridge_slave_1: left allmulticast mode [ 564.348632][T31321] bridge_slave_1: left promiscuous mode [ 564.354598][T31321] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.364146][T31321] bond0: (slave bond_slave_0): Releasing backup interface [ 564.374563][T31321] bond0: (slave bond_slave_1): Releasing backup interface [ 564.388215][T31321] team0: Port device team_slave_0 removed [ 564.400108][T31321] team0: Port device team_slave_1 removed [ 564.419836][T31321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.427404][T31321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.437339][T31321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.444963][T31321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.550511][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.575931][T31346] __nla_validate_parse: 3 callbacks suppressed [ 564.575946][T31346] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9409'. [ 564.594272][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.615953][T31346] loop7: detected capacity change from 0 to 512 [ 564.624186][T31346] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 564.626568][T31349] SELinux: failed to load policy [ 564.634933][T31346] EXT4-fs (loop7): orphan cleanup on readonly fs [ 564.644709][T31346] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #15: comm syz.7.9409: iget: bad i_size value: 360287970189639690 [ 564.661067][T31346] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.9409: Bad quota inode: 15, type: 2 [ 564.673402][T31346] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 564.690301][T31346] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 564.698214][T31346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.720007][T31346] EXT4-fs error (device loop7): ext4_lookup:1787: comm syz.7.9409: inode #15: comm syz.7.9409: iget: illegal inode # [ 564.734194][T31351] loop5: detected capacity change from 0 to 512 [ 564.742143][T31351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 564.751079][T31351] EXT4-fs (loop5): orphan cleanup on readonly fs [ 564.757823][T31351] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.9411: iget: bad i_size value: 360287970189639690 [ 564.771338][T31351] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9411: Bad quota inode: 15, type: 2 [ 564.782675][T31351] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 564.797883][T31351] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 564.805501][T31351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.822472][T31351] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.9411: inode #15: comm syz.5.9411: iget: illegal inode # [ 564.877896][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.900991][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.911405][T31357] loop7: detected capacity change from 0 to 1024 [ 564.930324][T31357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.943468][T31357] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.960313][T31357] netlink: 'syz.7.9412': attribute type 3 has an invalid length. [ 565.135838][T31374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9419'. [ 565.161235][T31372] loop4: detected capacity change from 0 to 512 [ 565.189616][T31372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.205349][T31385] SELinux: failed to load policy [ 565.220596][T31372] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.9418: iget: bad i_size value: 2533274857506816 [ 565.253380][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.294634][T31389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9424'. [ 565.465717][T31395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.485964][T31395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.533639][T31405] loop8: detected capacity change from 0 to 1024 [ 565.544582][T31395] loop4: detected capacity change from 0 to 4096 [ 565.664118][T31422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9438'. [ 565.678306][T31422] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9438'. [ 565.853403][T31428] netlink: 'syz.5.9441': attribute type 13 has an invalid length. [ 565.870490][T31428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.013460][T31441] loop5: detected capacity change from 0 to 1024 [ 566.023828][T31441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.048548][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'. [ 566.057608][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'. [ 566.066761][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'. [ 566.067198][T24160] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 566.091223][T24160] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 566.104262][T24160] EXT4-fs (loop5): This should not happen!! Data will be lost [ 566.104262][T24160] [ 566.118731][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.129519][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'. [ 566.138487][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9443'. [ 566.149821][T31448] SELinux: failed to load policy [ 566.184003][T31454] loop4: detected capacity change from 0 to 512 [ 566.210029][T31454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.241019][T31461] loop5: detected capacity change from 0 to 512 [ 566.247508][T31454] wireguard3: entered promiscuous mode [ 566.253134][T31454] wireguard3: entered allmulticast mode [ 566.255686][T31461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.363970][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.618134][T31481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.640071][T31481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.717460][T31481] loop5: detected capacity change from 0 to 4096 [ 566.869314][T31491] loop7: detected capacity change from 0 to 512 [ 566.886348][T31491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 566.906086][T31491] EXT4-fs (loop7): orphan cleanup on readonly fs [ 566.920787][T31491] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #15: comm syz.7.9458: iget: bad i_size value: 360287970189639690 [ 566.936254][T31491] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.9458: Bad quota inode: 15, type: 2 [ 566.937350][T31474] Set syz1 is full, maxelem 65536 reached [ 566.947892][T31491] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 566.968760][T31491] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 566.978914][T31491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 566.996269][T31498] SELinux: failed to load policy [ 566.996619][T31491] EXT4-fs error (device loop7): ext4_lookup:1787: comm syz.7.9458: inode #15: comm syz.7.9458: iget: illegal inode # [ 567.044141][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.085989][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.108033][T31508] loop4: detected capacity change from 0 to 1024 [ 567.115053][T31509] loop8: detected capacity change from 0 to 1024 [ 567.126042][T31508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.151943][T24188] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 393: padding at end of block bitmap is not set [ 567.167039][T24188] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 567.179702][T24188] EXT4-fs (loop4): This should not happen!! Data will be lost [ 567.179702][T24188] [ 567.190641][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.598839][T31531] loop4: detected capacity change from 0 to 1024 [ 567.650088][T31535] SELinux: failed to load policy [ 567.715691][T31537] loop5: detected capacity change from 0 to 512 [ 567.771702][T31537] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 567.780160][T31537] EXT4-fs (loop5): orphan cleanup on readonly fs [ 567.788629][T31537] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.9473: iget: bad i_size value: 360287970189639690 [ 567.803883][T31537] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9473: Bad quota inode: 15, type: 2 [ 567.815702][T31537] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 567.831378][T31537] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 567.840215][T31537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 567.856430][T31537] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.9473: inode #15: comm syz.5.9473: iget: illegal inode # [ 567.943594][T31551] netlink: 'syz.4.9475': attribute type 13 has an invalid length. [ 567.987686][T31551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.055563][T31553] loop8: detected capacity change from 0 to 512 [ 568.366135][T31553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.456291][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.494233][T31562] loop5: detected capacity change from 0 to 164 [ 568.501051][T31562] iso9660: Unknown parameter 'HNy$ÔÆd öí%D >ÜZ¹×Zˆ›ßf[úš{bôDq' [ 568.544571][T29447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.561147][T31564] loop5: detected capacity change from 0 to 1024 [ 568.628942][T31569] loop7: detected capacity change from 0 to 512 [ 568.645909][T31573] loop4: detected capacity change from 0 to 512 [ 568.656058][T31569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.672114][T31573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.686173][T31569] bridge0: port 1(syz_tun) entered blocking state [ 568.692793][T31569] bridge0: port 1(syz_tun) entered disabled state [ 568.701082][T31569] syz_tun: entered allmulticast mode [ 568.707346][T31569] syz_tun: entered promiscuous mode [ 568.713079][T31569] bridge0: port 1(syz_tun) entered blocking state [ 568.719742][T31569] bridge0: port 1(syz_tun) entered forwarding state [ 568.778968][T31569] syz_tun: left allmulticast mode [ 568.784100][T31569] syz_tun: left promiscuous mode [ 568.789221][T31569] bridge0: port 1(syz_tun) entered disabled state [ 568.862432][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.902666][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.911928][T31588] loop4: detected capacity change from 0 to 512 [ 568.919665][T31588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 568.928188][T31588] EXT4-fs (loop4): orphan cleanup on readonly fs [ 568.935162][T31588] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.9491: iget: bad i_size value: 360287970189639690 [ 568.951756][T31588] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.9491: Bad quota inode: 15, type: 2 [ 568.966934][T31588] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 568.993763][T31588] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 569.011392][T31588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 569.032624][T31588] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.9491: inode #15: comm syz.4.9491: iget: illegal inode # [ 569.120506][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.145036][T31605] loop4: detected capacity change from 0 to 1024 [ 569.153900][ T29] kauditd_printk_skb: 1301 callbacks suppressed [ 569.153918][ T29] audit: type=1326 audit(12583478.420:86502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 569.185607][ T29] audit: type=1326 audit(12583478.420:86503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 569.199226][T31607] loop7: detected capacity change from 0 to 512 [ 569.209363][ T29] audit: type=1326 audit(12583478.420:86504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 569.239465][ T29] audit: type=1326 audit(12583478.420:86505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa86acee9e3 code=0x7ffc0000 [ 569.239469][T31607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 569.271533][ T29] audit: type=1326 audit(12583478.420:86506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa86aced45f code=0x7ffc0000 [ 569.294890][ T29] audit: type=1326 audit(12583478.420:86507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa86aceea37 code=0x7ffc0000 [ 569.309314][T31607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.319421][ T29] audit: type=1326 audit(12583478.459:86508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa86aced310 code=0x7ffc0000 [ 569.354454][ T29] audit: type=1326 audit(12583478.459:86509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86acee5ab code=0x7ffc0000 [ 569.377970][ T29] audit: type=1326 audit(12583478.469:86510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa86aced60a code=0x7ffc0000 [ 569.401397][ T29] audit: type=1326 audit(12583478.469:86511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31606 comm="syz.7.9498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa86aced60a code=0x7ffc0000 [ 569.469217][T31614] SELinux: failed to load policy [ 569.511566][T31617] loop8: detected capacity change from 0 to 512 [ 569.531041][T31618] loop4: detected capacity change from 0 to 1024 [ 569.542911][T31617] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.567461][T31618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.624976][T24160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 569.642440][T24160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 569.655136][T24160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 569.655136][T24160] [ 569.666215][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.683216][T29447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.749422][T31635] loop8: detected capacity change from 0 to 1024 [ 569.766493][T31635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.779327][T31635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.792465][T31637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.814117][T31637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.827272][T31635] netlink: 'syz.8.9508': attribute type 3 has an invalid length. [ 570.078905][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.150520][T31630] Set syz1 is full, maxelem 65536 reached [ 570.190989][T31651] SELinux: failed to load policy [ 570.217017][T31653] __nla_validate_parse: 16 callbacks suppressed [ 570.217032][T31653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9513'. [ 570.536224][T31670] bridge0: port 1(syz_tun) entered blocking state [ 570.542905][T31670] bridge0: port 1(syz_tun) entered disabled state [ 570.549566][T31670] syz_tun: entered allmulticast mode [ 570.556058][T31670] syz_tun: entered promiscuous mode [ 570.561724][T31670] bridge0: port 1(syz_tun) entered blocking state [ 570.568271][T31670] bridge0: port 1(syz_tun) entered forwarding state [ 570.583675][T31670] syz_tun: left allmulticast mode [ 570.586972][T31672] loop5: detected capacity change from 0 to 512 [ 570.588800][T31670] syz_tun: left promiscuous mode [ 570.600363][T31670] bridge0: port 1(syz_tun) entered disabled state [ 570.604492][T31672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.686885][T31671] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.9519: iget: bad i_size value: 2533274857506816 [ 570.730952][T31676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.739628][T31676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.742823][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.770703][T31676] loop4: detected capacity change from 0 to 4096 [ 570.788387][T31683] SELinux: failed to load policy [ 570.795464][T31681] loop5: detected capacity change from 0 to 164 [ 570.802545][T31681] iso9660: Unknown parameter 'HNy$ÔÆd öí%D >ÜZ¹×Zˆ›ßf[úš{bôDq' [ 570.862149][T31687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.873064][T31687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.899302][T31687] loop5: detected capacity change from 0 to 4096 [ 571.129163][T31700] loop7: detected capacity change from 0 to 1024 [ 571.157021][T31700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.169823][T31700] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.190473][T31700] netlink: 'syz.7.9531': attribute type 3 has an invalid length. [ 571.216150][T31706] netlink: 48 bytes leftover after parsing attributes in process `syz.7.9533'. [ 571.243838][T31708] loop7: detected capacity change from 0 to 1024 [ 571.260395][T31708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.285608][T24188] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 393: padding at end of block bitmap is not set [ 571.300581][T24188] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 571.313364][T24188] EXT4-fs (loop7): This should not happen!! Data will be lost [ 571.313364][T24188] [ 571.325316][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.342944][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9532'. [ 571.351937][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9532'. [ 571.361520][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9532'. [ 571.374623][T31718] SELinux: failed to load policy [ 571.399698][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9532'. [ 571.408740][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9532'. [ 571.413802][T31724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9538'. [ 571.419731][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9532'. [ 571.430736][T31724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9538'. [ 571.489187][T31731] loop7: detected capacity change from 0 to 512 [ 571.499942][T31731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.608925][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.633662][T31742] loop7: detected capacity change from 0 to 1024 [ 571.646459][T31742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.659165][T31742] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.673020][T31742] netlink: 'syz.7.9544': attribute type 3 has an invalid length. [ 571.826962][T31754] loop7: detected capacity change from 0 to 1024 [ 571.854210][T31758] SELinux: failed to load policy [ 572.008599][T31765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.030903][T31765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.108962][T31767] loop8: detected capacity change from 0 to 1024 [ 572.164817][T31769] loop8: detected capacity change from 0 to 512 [ 572.174171][T31769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.188356][T31769] bridge0: port 1(syz_tun) entered blocking state [ 572.194898][T31769] bridge0: port 1(syz_tun) entered disabled state [ 572.201794][T31769] syz_tun: entered allmulticast mode [ 572.208085][T31769] syz_tun: entered promiscuous mode [ 572.213936][T31769] bridge0: port 1(syz_tun) entered blocking state [ 572.220457][T31769] bridge0: port 1(syz_tun) entered forwarding state [ 572.234141][T31769] syz_tun: left allmulticast mode [ 572.239307][T31769] syz_tun: left promiscuous mode [ 572.244465][T31769] bridge0: port 1(syz_tun) entered disabled state [ 572.314863][T31762] Set syz1 is full, maxelem 65536 reached [ 572.415864][T29447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.555031][T31780] loop4: detected capacity change from 0 to 512 [ 572.568874][T31780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.686655][T31787] netlink: 'syz.8.9557': attribute type 13 has an invalid length. [ 572.753598][T31787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.823443][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.845313][T31792] SELinux: failed to load policy [ 573.062920][T31801] loop4: detected capacity change from 0 to 512 [ 573.071782][T31801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 573.087990][T31801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.554979][T31818] loop7: detected capacity change from 0 to 512 [ 573.565769][T31818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.586195][T31818] wireguard2: entered promiscuous mode [ 573.591752][T31818] wireguard2: entered allmulticast mode [ 573.858536][T31825] loop5: detected capacity change from 0 to 1024 [ 573.921724][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.947712][T31829] loop4: detected capacity change from 0 to 512 [ 573.974102][T31829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.989657][T31829] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.9570: iget: bad i_size value: 2533274857506816 [ 574.025903][T28254] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.180957][T31839] SELinux: failed to load policy [ 574.423611][T31851] netlink: 'syz.4.9576': attribute type 13 has an invalid length. [ 574.442731][T31851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.711445][T29863] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.770072][T31855] loop5: detected capacity change from 0 to 512 [ 574.786610][T31855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.805750][T31855] bridge0: port 1(syz_tun) entered blocking state [ 574.812662][T31855] bridge0: port 1(syz_tun) entered disabled state [ 574.823490][T31855] syz_tun: entered allmulticast mode [ 574.829813][T31855] syz_tun: entered promiscuous mode [ 574.835814][T31855] bridge0: port 1(syz_tun) entered blocking state [ 574.842524][T31855] bridge0: port 1(syz_tun) entered forwarding state [ 574.861140][T31855] syz_tun: left allmulticast mode [ 574.866263][T31855] syz_tun: left promiscuous mode [ 574.866519][T31864] loop8: detected capacity change from 0 to 512 [ 574.871411][T31855] bridge0: port 1(syz_tun) entered disabled state [ 574.885657][T31864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.997128][T31867] loop7: detected capacity change from 0 to 512 [ 575.014692][T31867] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.9584: iget: bad i_size value: 2533274857506816 [ 575.028788][ T29] kauditd_printk_skb: 1090 callbacks suppressed [ 575.028806][ T29] audit: type=1326 audit(12583484.168:87602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.067932][T31873] loop8: detected capacity change from 0 to 512 [ 575.075000][ T29] audit: type=1326 audit(12583484.198:87603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.098512][ T29] audit: type=1326 audit(12583484.198:87604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.121990][ T29] audit: type=1326 audit(12583484.198:87605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.145570][ T29] audit: type=1326 audit(12583484.198:87606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.169139][ T29] audit: type=1326 audit(12583484.198:87607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.192726][ T29] audit: type=1326 audit(12583484.198:87608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31866 comm="syz.7.9584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.237438][T31876] loop4: detected capacity change from 0 to 512 [ 575.286546][T31876] bridge0: port 1(syz_tun) entered blocking state [ 575.291585][T31881] loop5: detected capacity change from 0 to 512 [ 575.293075][T31876] bridge0: port 1(syz_tun) entered disabled state [ 575.311715][T31876] syz_tun: entered allmulticast mode [ 575.319108][T31876] syz_tun: entered promiscuous mode [ 575.324839][T31876] bridge0: port 1(syz_tun) entered blocking state [ 575.331453][T31876] bridge0: port 1(syz_tun) entered forwarding state [ 575.339500][T31883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.346950][T31885] syz_tun: left allmulticast mode [ 575.352971][T31885] syz_tun: left promiscuous mode [ 575.358161][T31885] bridge0: port 1(syz_tun) entered disabled state [ 575.367521][T31883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.387905][T31891] __nla_validate_parse: 19 callbacks suppressed [ 575.387919][T31891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9592'. [ 575.405141][T31891] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9592'. [ 575.455731][T31881] wireguard0: entered promiscuous mode [ 575.461416][T31881] wireguard0: entered allmulticast mode [ 575.491280][T31896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9593'. [ 575.516869][T31898] SELinux: failed to load policy [ 575.553871][T31900] loop8: detected capacity change from 0 to 128 [ 575.574923][T31902] loop4: detected capacity change from 0 to 1024 [ 575.586752][ T29] audit: type=1326 audit(13107772.713:87609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31903 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.611472][ T29] audit: type=1326 audit(13107772.713:87610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31903 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.635409][ T29] audit: type=1326 audit(13107772.713:87611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31903 comm="syz.7.9597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 575.671734][T31902] netlink: 'syz.4.9595': attribute type 3 has an invalid length. [ 575.742981][T31911] bio_check_eod: 305 callbacks suppressed [ 575.743001][T31911] syz.8.9596: attempt to access beyond end of device [ 575.743001][T31911] loop8: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 575.775341][T31911] syz.8.9596: attempt to access beyond end of device [ 575.775341][T31911] loop8: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 575.800665][T31911] syz.8.9596: attempt to access beyond end of device [ 575.800665][T31911] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 575.815114][T31916] loop4: detected capacity change from 0 to 512 [ 575.816938][T31911] syz.8.9596: attempt to access beyond end of device [ 575.816938][T31911] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 575.835323][T31916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 575.844331][T31911] syz.8.9596: attempt to access beyond end of device [ 575.844331][T31911] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 575.858036][T31911] syz.8.9596: attempt to access beyond end of device [ 575.858036][T31911] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 575.871766][T31911] syz.8.9596: attempt to access beyond end of device [ 575.871766][T31911] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 575.885555][T31911] syz.8.9596: attempt to access beyond end of device [ 575.885555][T31911] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 575.899543][T31911] syz.8.9596: attempt to access beyond end of device [ 575.899543][T31911] loop8: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 575.949030][T31920] netlink: 'syz.7.9599': attribute type 13 has an invalid length. [ 575.973242][T31920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.072754][T31911] syz.8.9596: attempt to access beyond end of device [ 576.072754][T31911] loop8: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 576.436381][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9602'. [ 576.445439][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9602'. [ 576.458161][T31931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9603'. [ 576.467546][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9602'. [ 576.492547][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9602'. [ 576.501555][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9602'. [ 576.524441][T31925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9602'. [ 576.543853][T31938] loop5: detected capacity change from 0 to 512 [ 576.554466][T31938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.692741][T31945] loop8: detected capacity change from 0 to 512 [ 576.707152][T31945] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 576.715480][T31945] EXT4-fs (loop8): orphan cleanup on readonly fs [ 576.723761][T31945] EXT4-fs error (device loop8): ext4_quota_enable:7124: inode #15: comm syz.8.9606: iget: bad i_size value: 360287970189639690 [ 576.739054][T31945] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.9606: Bad quota inode: 15, type: 2 [ 576.750476][T31945] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 576.767073][T31945] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 576.784726][T31945] EXT4-fs error (device loop8): ext4_lookup:1787: comm syz.8.9606: inode #15: comm syz.8.9606: iget: illegal inode # [ 576.994827][T31964] loop8: detected capacity change from 0 to 512 [ 577.004682][T31966] loop7: detected capacity change from 0 to 512 [ 577.017159][T31964] wireguard4: entered promiscuous mode [ 577.022692][T31964] wireguard4: entered allmulticast mode [ 577.131004][T31975] SELinux: failed to load policy [ 577.363023][T31985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.390124][T31985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.611534][T31992] loop5: detected capacity change from 0 to 1024 [ 577.663561][T31982] Set syz1 is full, maxelem 65536 reached [ 577.689607][T31998] loop5: detected capacity change from 0 to 128 [ 577.747194][T32004] SELinux: failed to load policy [ 577.773607][T32007] loop4: detected capacity change from 0 to 512 [ 577.921612][T32016] loop8: detected capacity change from 0 to 1024 [ 578.064096][T32026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.088652][T32026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.193791][T32022] loop8: detected capacity change from 0 to 4096 [ 578.455121][T32040] loop7: detected capacity change from 0 to 512 [ 578.468309][T32018] Set syz1 is full, maxelem 65536 reached [ 578.493290][T32042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.502363][T32042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.586404][T32047] loop4: detected capacity change from 0 to 512 [ 578.594608][T32047] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 578.602871][T32047] EXT4-fs (loop4): orphan cleanup on readonly fs [ 578.611033][T32047] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.9653: iget: bad i_size value: 360287970189639690 [ 578.624728][T32047] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.9653: Bad quota inode: 15, type: 2 [ 578.642136][T32047] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 578.657350][T32047] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 578.667715][T32047] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.9653: inode #15: comm syz.4.9653: iget: illegal inode # [ 578.826258][T32066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.843600][T32066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.885172][T32066] loop7: detected capacity change from 0 to 4096 [ 578.984113][T32071] loop4: detected capacity change from 0 to 1024 [ 579.031620][ T5125] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:60: bg 0: block 393: padding at end of block bitmap is not set [ 579.046879][ T5125] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 579.059522][ T5125] EXT4-fs (loop4): This should not happen!! Data will be lost [ 579.059522][ T5125] [ 579.116269][T32060] Set syz1 is full, maxelem 65536 reached [ 579.117140][T32075] SELinux: failed to load policy [ 579.211566][T32083] loop8: detected capacity change from 0 to 512 [ 579.418738][T32102] loop4: detected capacity change from 0 to 1024 [ 579.621856][T32111] SELinux: failed to load policy [ 579.687602][T32113] loop4: detected capacity change from 0 to 512 [ 579.704658][T32113] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 579.742590][T32113] EXT4-fs (loop4): orphan cleanup on readonly fs [ 579.759381][T32113] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.9667: iget: bad i_size value: 360287970189639690 [ 579.781916][T32124] loop7: detected capacity change from 0 to 512 [ 579.789579][T32113] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.9667: Bad quota inode: 15, type: 2 [ 579.802791][T32113] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 579.819637][T32113] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 579.840711][T32113] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.9667: inode #15: comm syz.4.9667: iget: illegal inode # [ 579.937984][T32133] loop5: detected capacity change from 0 to 512 [ 580.056277][T32147] SELinux: failed to load policy [ 580.084308][T32153] SELinux: failed to load policy [ 580.329124][T32160] netlink: 'syz.7.9682': attribute type 13 has an invalid length. [ 580.347704][T32160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.528022][ T29] kauditd_printk_skb: 852 callbacks suppressed [ 580.528043][ T29] audit: type=1326 audit(14156353.504:88464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.557943][ T29] audit: type=1326 audit(14156353.504:88465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.581549][ T29] audit: type=1326 audit(14156353.504:88466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.605159][ T29] audit: type=1326 audit(14156353.504:88467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.629106][ T29] audit: type=1326 audit(14156353.504:88468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.652595][ T29] audit: type=1326 audit(14156353.504:88469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.676138][ T29] audit: type=1326 audit(14156353.504:88470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.699811][ T29] audit: type=1326 audit(14156353.504:88471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.723409][ T29] audit: type=1326 audit(14156353.504:88472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.747365][ T29] audit: type=1326 audit(14156353.504:88473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32162 comm="syz.5.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7ffc0000 [ 580.823678][T32168] loop5: detected capacity change from 0 to 512 [ 580.944730][T32177] __nla_validate_parse: 13 callbacks suppressed [ 580.944749][T32177] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9691'. [ 580.960605][T32177] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9691'. [ 581.005939][T32181] loop4: detected capacity change from 0 to 512 [ 581.015988][T32181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 581.026766][T32183] SELinux: failed to load policy [ 581.090052][T32187] loop5: detected capacity change from 0 to 512 [ 581.172234][T32199] loop7: detected capacity change from 0 to 1024 [ 581.309895][T32214] loop7: detected capacity change from 0 to 512 [ 581.319675][T32215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9701'. [ 581.501923][T32224] SELinux: failed to load policy [ 581.594100][T32228] netlink: 'syz.5.9707': attribute type 13 has an invalid length. [ 581.629830][T32228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.730896][T32231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9710'. [ 581.741445][T32231] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9710'. [ 582.050662][T32243] loop4: detected capacity change from 0 to 1024 [ 582.153515][T32252] loop8: detected capacity change from 0 to 1024 [ 582.172750][T32252] netlink: 'syz.8.9720': attribute type 3 has an invalid length. [ 582.212105][T32259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9721'. [ 582.222906][T32259] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9721'. [ 582.275616][T32261] loop8: detected capacity change from 0 to 512 [ 582.300313][T32261] bridge0: port 1(syz_tun) entered blocking state [ 582.306881][T32261] bridge0: port 1(syz_tun) entered disabled state [ 582.315060][T32261] syz_tun: entered allmulticast mode [ 582.321850][T32261] syz_tun: entered promiscuous mode [ 582.323856][T32262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.327628][T32261] bridge0: port 1(syz_tun) entered blocking state [ 582.342017][T32261] bridge0: port 1(syz_tun) entered forwarding state [ 582.347053][T32267] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9724'. [ 582.360203][T32262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.401698][T32267] loop5: detected capacity change from 0 to 512 [ 582.416685][T32261] syz_tun: left allmulticast mode [ 582.421896][T32261] syz_tun: left promiscuous mode [ 582.427009][T32261] bridge0: port 1(syz_tun) entered disabled state [ 582.448361][T32267] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 582.458323][T32267] EXT4-fs (loop5): orphan cleanup on readonly fs [ 582.464936][T32262] loop4: detected capacity change from 0 to 4096 [ 582.501250][T32267] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.9724: iget: bad i_size value: 360287970189639690 [ 582.570669][T32267] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9724: Bad quota inode: 15, type: 2 [ 582.616548][T32267] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 582.642238][T32267] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 582.717309][T32256] Set syz1 is full, maxelem 65536 reached [ 582.728630][T32267] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.9724: inode #15: comm syz.5.9724: iget: illegal inode # [ 582.913673][T32282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.922715][T32282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.944197][T32287] loop7: detected capacity change from 0 to 1024 [ 582.954708][T32282] loop8: detected capacity change from 0 to 4096 [ 582.965686][T32289] loop5: detected capacity change from 0 to 512 [ 583.001161][T32291] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9733'. [ 583.010714][T32294] SELinux: failed to load policy [ 583.032012][T32291] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9733'. [ 583.058091][T32298] SELinux: failed to load policy [ 583.127113][T32303] loop5: detected capacity change from 0 to 512 [ 583.137803][T32303] bridge0: port 1(syz_tun) entered blocking state [ 583.144441][T32303] bridge0: port 1(syz_tun) entered disabled state [ 583.151203][T32303] syz_tun: entered allmulticast mode [ 583.157184][T32303] syz_tun: entered promiscuous mode [ 583.163086][T32303] bridge0: port 1(syz_tun) entered blocking state [ 583.169574][T32303] bridge0: port 1(syz_tun) entered forwarding state [ 583.182898][T32303] syz_tun: left allmulticast mode [ 583.188088][T32303] syz_tun: left promiscuous mode [ 583.193201][T32303] bridge0: port 1(syz_tun) entered disabled state [ 583.357261][T32315] loop4: detected capacity change from 0 to 512 [ 583.377492][T32315] wireguard4: entered promiscuous mode [ 583.383059][T32315] wireguard4: entered allmulticast mode [ 583.425744][T32321] loop5: detected capacity change from 0 to 1024 [ 583.519725][T32329] SELinux: failed to load policy [ 583.526438][T32324] loop5: detected capacity change from 0 to 512 [ 583.554149][T32324] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.9744: iget: bad i_size value: 2533274857506816 [ 583.593974][T32335] loop8: detected capacity change from 0 to 512 [ 583.601690][T32335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 583.610040][T32335] EXT4-fs (loop8): orphan cleanup on readonly fs [ 583.617399][T32335] EXT4-fs error (device loop8): ext4_quota_enable:7124: inode #15: comm syz.8.9748: iget: bad i_size value: 360287970189639690 [ 583.632096][T32335] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.9748: Bad quota inode: 15, type: 2 [ 583.651470][T32335] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 583.669289][T32344] loop4: detected capacity change from 0 to 128 [ 583.676359][T32335] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 583.687866][T32335] EXT4-fs error (device loop8): ext4_lookup:1787: comm syz.8.9748: inode #15: comm syz.8.9748: iget: illegal inode # [ 583.729098][T32346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.748317][T32346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.779930][T32346] loop5: detected capacity change from 0 to 4096 [ 583.938743][T32348] bio_check_eod: 200 callbacks suppressed [ 583.938763][T32348] syz.4.9751: attempt to access beyond end of device [ 583.938763][T32348] loop4: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 583.994750][T32348] syz.4.9751: attempt to access beyond end of device [ 583.994750][T32348] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 584.036835][T32353] loop7: detected capacity change from 0 to 1024 [ 584.046201][T32348] syz.4.9751: attempt to access beyond end of device [ 584.046201][T32348] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 584.075659][T32348] syz.4.9751: attempt to access beyond end of device [ 584.075659][T32348] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 584.099935][T32348] syz.4.9751: attempt to access beyond end of device [ 584.099935][T32348] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 584.115231][T32348] syz.4.9751: attempt to access beyond end of device [ 584.115231][T32348] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 584.130355][T32348] syz.4.9751: attempt to access beyond end of device [ 584.130355][T32348] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 584.144158][T32348] syz.4.9751: attempt to access beyond end of device [ 584.144158][T32348] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 584.160150][T32348] syz.4.9751: attempt to access beyond end of device [ 584.160150][T32348] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 584.177395][T32348] syz.4.9751: attempt to access beyond end of device [ 584.177395][T32348] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 584.209576][T32340] Set syz1 is full, maxelem 65536 reached [ 584.266608][T32364] SELinux: failed to load policy [ 584.385196][T32371] loop7: detected capacity change from 0 to 512 [ 584.405435][T32371] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.9760: iget: bad i_size value: 2533274857506816 [ 584.466945][T32379] loop8: detected capacity change from 0 to 512 [ 584.477670][T32379] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 584.486651][T32379] EXT4-fs (loop8): orphan cleanup on readonly fs [ 584.493715][T32379] EXT4-fs error (device loop8): ext4_quota_enable:7124: inode #15: comm syz.8.9764: iget: bad i_size value: 360287970189639690 [ 584.508527][T32379] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.9764: Bad quota inode: 15, type: 2 [ 584.522187][T32379] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 584.538137][T32379] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 584.557361][T32384] netlink: 'syz.0.9766': attribute type 3 has an invalid length. [ 584.597908][T32379] EXT4-fs error (device loop8): ext4_lookup:1787: comm syz.8.9764: inode #15: comm syz.8.9764: iget: illegal inode # [ 584.611441][T32387] loop4: detected capacity change from 0 to 512 [ 584.776632][T32400] netlink: 'syz.7.9765': attribute type 13 has an invalid length. [ 584.810378][T32400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.890096][T32398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.898992][T32398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.145606][T32404] loop5: detected capacity change from 0 to 512 [ 585.163165][T32409] loop4: detected capacity change from 0 to 1024 [ 585.174176][T32404] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.9775: iget: bad i_size value: 2533274857506816 [ 585.200149][T24174] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:42: bg 0: block 393: padding at end of block bitmap is not set [ 585.216796][T24174] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 585.229425][T24174] EXT4-fs (loop4): This should not happen!! Data will be lost [ 585.229425][T24174] [ 585.289312][T32421] loop4: detected capacity change from 0 to 1024 [ 585.299894][T32422] loop5: detected capacity change from 0 to 128 [ 585.317967][T32421] netlink: 'syz.4.9779': attribute type 3 has an invalid length. [ 585.380625][T32426] loop8: detected capacity change from 0 to 4096 [ 585.512135][T32432] loop7: detected capacity change from 0 to 512 [ 585.674407][T32436] loop4: detected capacity change from 0 to 512 [ 585.702760][T32436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 585.722011][T32436] EXT4-fs (loop4): orphan cleanup on readonly fs [ 585.733390][T32436] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.9782: iget: bad i_size value: 360287970189639690 [ 585.749049][T32436] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.9782: Bad quota inode: 15, type: 2 [ 585.750898][T32415] Set syz1 is full, maxelem 65536 reached [ 585.760382][T32436] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 585.798363][T32436] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 585.820033][T32436] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.9782: inode #15: comm syz.4.9782: iget: illegal inode # [ 585.872323][T32449] loop7: detected capacity change from 0 to 1024 [ 585.919323][T24160] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 393: padding at end of block bitmap is not set [ 585.936626][T24160] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 585.949321][T24160] EXT4-fs (loop7): This should not happen!! Data will be lost [ 585.949321][T24160] [ 585.978986][T32456] loop8: detected capacity change from 0 to 512 [ 585.994679][ T29] kauditd_printk_skb: 1928 callbacks suppressed [ 585.994725][ T29] audit: type=1326 audit(15204934.875:90402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 586.026000][ T29] audit: type=1326 audit(15204934.875:90403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 586.027802][T32463] loop7: detected capacity change from 0 to 512 [ 586.049517][ T29] audit: type=1326 audit(15204934.875:90404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 586.049557][ T29] audit: type=1326 audit(15204934.875:90405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa86acee9e3 code=0x7ffc0000 [ 586.083025][T32463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 586.102868][ T29] audit: type=1326 audit(15204934.885:90406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa86aced45f code=0x7ffc0000 [ 586.102972][ T29] audit: type=1326 audit(15204934.885:90407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa86aceea37 code=0x7ffc0000 [ 586.118258][T32456] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.9789: iget: bad i_size value: 2533274857506816 [ 586.225866][T32471] __nla_validate_parse: 11 callbacks suppressed [ 586.225949][T32471] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9792'. [ 586.242001][ T29] audit: type=1326 audit(15204934.915:90408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa86aced310 code=0x7ffc0000 [ 586.265608][ T29] audit: type=1326 audit(15204934.915:90409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa86acee5ab code=0x7ffc0000 [ 586.289145][ T29] audit: type=1326 audit(15204934.945:90410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa86aced60a code=0x7ffc0000 [ 586.312517][ T29] audit: type=1326 audit(15204934.945:90411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32462 comm="syz.7.9791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa86aced60a code=0x7ffc0000 [ 586.323268][T32474] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9792'. [ 586.357948][T32476] loop8: detected capacity change from 0 to 1024 [ 586.512244][T32484] loop8: detected capacity change from 0 to 1024 [ 586.537962][T32484] netlink: 'syz.8.9797': attribute type 3 has an invalid length. [ 586.583247][T32492] loop8: detected capacity change from 0 to 1024 [ 586.608609][T24188] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 393: padding at end of block bitmap is not set [ 586.612919][T32494] loop4: detected capacity change from 0 to 512 [ 586.625684][T24188] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 586.642297][T24188] EXT4-fs (loop8): This should not happen!! Data will be lost [ 586.642297][T24188] [ 586.643479][T32494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 586.671039][T32494] EXT4-fs (loop4): orphan cleanup on readonly fs [ 586.683483][T32500] 9pnet_fd: Insufficient options for proto=fd [ 586.695623][T32494] EXT4-fs error (device loop4): ext4_quota_enable:7124: inode #15: comm syz.4.9800: iget: bad i_size value: 360287970189639690 [ 586.721974][T32494] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.9800: Bad quota inode: 15, type: 2 [ 586.733365][T32494] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 586.750048][T32494] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 586.752358][T32503] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9802'. [ 586.768173][T32494] EXT4-fs error (device loop4): ext4_lookup:1787: comm syz.4.9800: inode #15: comm syz.4.9800: iget: illegal inode # [ 586.784358][T32503] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9802'. [ 586.802617][T32505] bridge0: port 1(syz_tun) entered blocking state [ 586.809394][T32505] bridge0: port 1(syz_tun) entered disabled state [ 586.816229][T32505] syz_tun: entered allmulticast mode [ 586.822255][T32505] syz_tun: entered promiscuous mode [ 586.827969][T32505] bridge0: port 1(syz_tun) entered blocking state [ 586.834445][T32505] bridge0: port 1(syz_tun) entered forwarding state [ 586.847674][T32505] syz_tun: left allmulticast mode [ 586.853023][T32505] syz_tun: left promiscuous mode [ 586.853241][T32505] bridge0: port 1(syz_tun) entered disabled state [ 586.923786][T32512] loop7: detected capacity change from 0 to 1024 [ 586.969416][T32514] loop8: detected capacity change from 0 to 512 [ 586.988373][T32514] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.9807: iget: bad i_size value: 2533274857506816 [ 587.065770][T32526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.075875][T32526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.100266][T32529] loop7: detected capacity change from 0 to 1024 [ 587.111059][T32526] loop8: detected capacity change from 0 to 4096 [ 587.150735][T32529] netlink: 'syz.7.9810': attribute type 3 has an invalid length. [ 587.153636][T32535] 9pnet_fd: Insufficient options for proto=fd [ 587.199780][T32537] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9814'. [ 587.209338][T32537] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9814'. [ 587.245162][T32541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.253911][T32541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.290166][T32541] loop7: detected capacity change from 0 to 4096 [ 587.346608][T32549] loop5: detected capacity change from 0 to 512 [ 587.354206][T32549] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 587.362694][T32549] EXT4-fs (loop5): orphan cleanup on readonly fs [ 587.369363][T32549] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.9818: iget: bad i_size value: 360287970189639690 [ 587.393232][T32552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9815'. [ 587.402291][T32552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9815'. [ 587.412787][T32549] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.9818: Bad quota inode: 15, type: 2 [ 587.414860][T32552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9815'. [ 587.434096][T32549] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 587.445367][T32552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9815'. [ 587.449675][T32549] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 587.472196][T32549] EXT4-fs error (device loop5): ext4_lookup:1787: comm syz.5.9818: inode #15: comm syz.5.9818: iget: illegal inode # [ 587.493679][T32559] loop4: detected capacity change from 0 to 1024 [ 587.545088][T32565] loop4: detected capacity change from 0 to 512 [ 587.555356][T32565] bridge0: port 1(syz_tun) entered blocking state [ 587.561979][T32565] bridge0: port 1(syz_tun) entered disabled state [ 587.568642][T32565] syz_tun: entered allmulticast mode [ 587.574754][T32565] syz_tun: entered promiscuous mode [ 587.580358][T32565] bridge0: port 1(syz_tun) entered blocking state [ 587.586885][T32565] bridge0: port 1(syz_tun) entered forwarding state [ 587.600483][T32565] syz_tun: left allmulticast mode [ 587.605705][T32565] syz_tun: left promiscuous mode [ 587.610768][T32565] bridge0: port 1(syz_tun) entered disabled state [ 587.743571][T32578] loop8: detected capacity change from 0 to 512 [ 587.753954][T32578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 587.882503][T32593] loop7: detected capacity change from 0 to 1024 [ 587.940531][T32597] loop7: detected capacity change from 0 to 1024 [ 587.963142][T32597] netlink: 'syz.7.9834': attribute type 3 has an invalid length. [ 587.980983][T32599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.989671][T32599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.015202][T32599] loop4: detected capacity change from 0 to 4096 [ 588.148745][T32613] loop5: detected capacity change from 0 to 128 [ 588.241027][T32618] loop7: detected capacity change from 0 to 512 [ 588.248772][T32618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 588.432408][T32628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.441158][T32628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.683757][T32636] loop8: detected capacity change from 0 to 1024 [ 588.869416][T32626] Set syz1 is full, maxelem 65536 reached [ 589.026129][T32656] loop8: detected capacity change from 0 to 1024 [ 589.042612][T32656] netlink: 'syz.8.9852': attribute type 3 has an invalid length. [ 589.089384][T32662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.098075][T32662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.137720][T32662] loop8: detected capacity change from 0 to 4096 [ 589.249892][T32677] loop7: detected capacity change from 0 to 1024 [ 589.267083][T32677] netlink: 'syz.7.9860': attribute type 3 has an invalid length. [ 589.783771][T32703] loop4: detected capacity change from 0 to 512 [ 589.789460][T32705] loop8: detected capacity change from 0 to 1024 [ 589.821434][T24188] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 393: padding at end of block bitmap is not set [ 589.842667][T24188] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 589.855303][T24188] EXT4-fs (loop8): This should not happen!! Data will be lost [ 589.855303][T24188] [ 589.880994][T32710] loop8: detected capacity change from 0 to 1024 [ 589.902780][T32710] netlink: 'syz.8.9872': attribute type 3 has an invalid length. [ 589.950315][T32717] loop4: detected capacity change from 0 to 1024 [ 589.978923][T32720] loop4: detected capacity change from 0 to 512 [ 589.986471][T32720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 590.007868][T32718] loop8: detected capacity change from 0 to 512 [ 590.035052][T32718] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.9875: iget: bad i_size value: 2533274857506816 [ 590.075675][T32728] 9pnet_fd: Insufficient options for proto=fd [ 590.125765][T32737] tipc: Started in network mode [ 590.130721][T32737] tipc: Node identity 66ed119792c6, cluster identity 4711 [ 590.138124][T32737] tipc: Enabled bearer , priority 0 [ 590.147002][T32737] syzkaller0: entered promiscuous mode [ 590.152547][T32737] syzkaller0: entered allmulticast mode [ 590.180973][T32735] tipc: Resetting bearer [ 590.190630][T32735] tipc: Disabling bearer [ 590.227354][T32741] loop8: detected capacity change from 0 to 512 [ 590.233902][T32743] loop7: detected capacity change from 0 to 1024 [ 590.245971][T32741] bridge0: port 1(syz_tun) entered blocking state [ 590.252518][T32741] bridge0: port 1(syz_tun) entered disabled state [ 590.261183][T32741] syz_tun: entered allmulticast mode [ 590.267915][T32741] syz_tun: entered promiscuous mode [ 590.273782][T32741] bridge0: port 1(syz_tun) entered blocking state [ 590.278638][T32743] netlink: 'syz.7.9884': attribute type 3 has an invalid length. [ 590.280413][T32741] bridge0: port 1(syz_tun) entered forwarding state [ 590.304323][T32741] syz_tun: left allmulticast mode [ 590.309491][T32741] syz_tun: left promiscuous mode [ 590.314670][T32741] bridge0: port 1(syz_tun) entered disabled state [ 590.385684][T32751] loop7: detected capacity change from 0 to 512 [ 590.474490][T32763] SELinux: failed to load policy [ 590.582654][ T311] loop7: detected capacity change from 0 to 1024 [ 590.602926][ T311] netlink: 'syz.7.9897': attribute type 3 has an invalid length. [ 590.667131][ T319] loop7: detected capacity change from 0 to 1024 [ 590.699540][ T326] SELinux: failed to load policy [ 590.724351][ T329] loop7: detected capacity change from 0 to 1024 [ 590.756733][T24174] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:42: bg 0: block 393: padding at end of block bitmap is not set [ 590.774002][T24174] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 590.774129][T24174] EXT4-fs (loop7): This should not happen!! Data will be lost [ 590.774129][T24174] [ 590.808453][ T335] loop7: detected capacity change from 0 to 512 [ 590.818751][ T335] bridge0: port 1(syz_tun) entered blocking state [ 590.825329][ T335] bridge0: port 1(syz_tun) entered disabled state [ 590.832250][ T335] syz_tun: entered allmulticast mode [ 590.838434][ T335] syz_tun: entered promiscuous mode [ 590.845989][ T335] bridge0: port 1(syz_tun) entered blocking state [ 590.852551][ T335] bridge0: port 1(syz_tun) entered forwarding state [ 590.868175][ T335] syz_tun: left allmulticast mode [ 590.873469][ T335] syz_tun: left promiscuous mode [ 590.878543][ T335] bridge0: port 1(syz_tun) entered disabled state [ 590.919725][ T338] loop4: detected capacity change from 0 to 512 [ 591.086085][ T348] loop7: detected capacity change from 0 to 1024 [ 591.102718][ T348] netlink: 'syz.7.9910': attribute type 3 has an invalid length. [ 591.117529][ T351] loop4: detected capacity change from 0 to 1024 [ 591.165654][ T357] loop7: detected capacity change from 0 to 512 [ 591.356261][ T29] kauditd_printk_skb: 1262 callbacks suppressed [ 591.356280][ T29] audit: type=1326 audit(15204940.089:91674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.7.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.388645][ T29] audit: type=1326 audit(15204940.089:91675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.7.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.412123][ T29] audit: type=1326 audit(15204940.089:91676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.7.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.435635][ T29] audit: type=1326 audit(15204940.089:91677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=363 comm="syz.7.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.460709][ T370] __nla_validate_parse: 30 callbacks suppressed [ 591.460730][ T370] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9915'. [ 591.483604][ T29] audit: type=1326 audit(15204940.216:91678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.7.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.507187][ T29] audit: type=1326 audit(15204940.216:91679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.7.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.543855][ T29] audit: type=1326 audit(15204940.225:91680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.7.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.595149][ T29] audit: type=1326 audit(15204940.323:91681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.7.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.618654][ T29] audit: type=1326 audit(15204940.323:91682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=365 comm="syz.7.9917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa86acee9a9 code=0x7ffc0000 [ 591.650459][ T372] loop8: detected capacity change from 0 to 512 [ 591.679584][ T377] loop7: detected capacity change from 0 to 512 [ 591.690954][ T372] bridge0: port 1(syz_tun) entered blocking state [ 591.697487][ T372] bridge0: port 1(syz_tun) entered disabled state [ 591.705783][ T372] syz_tun: entered allmulticast mode [ 591.712098][ T372] syz_tun: entered promiscuous mode [ 591.718365][ T372] bridge0: port 1(syz_tun) entered blocking state [ 591.724890][ T372] bridge0: port 1(syz_tun) entered forwarding state [ 591.739773][ T372] syz_tun: left allmulticast mode [ 591.744916][ T372] syz_tun: left promiscuous mode [ 591.750106][ T372] bridge0: port 1(syz_tun) entered disabled state [ 591.879139][ T381] netlink: 'syz.0.9919': attribute type 13 has an invalid length. [ 591.983741][ T381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.156663][ T29] audit: type=1326 audit(15204940.860:91683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=361 comm="syz.5.9915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dcf21e9a9 code=0x7fc00000 [ 592.319329][ T394] loop7: detected capacity change from 0 to 1024 [ 592.354598][ T394] netlink: 'syz.7.9922': attribute type 3 has an invalid length. [ 592.416042][ T404] netlink: 'syz.7.9926': attribute type 21 has an invalid length. [ 592.424044][ T404] netlink: 128 bytes leftover after parsing attributes in process `syz.7.9926'. [ 592.429605][ T401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.433260][ T404] netlink: 'syz.7.9926': attribute type 5 has an invalid length. [ 592.449387][ T404] netlink: 3 bytes leftover after parsing attributes in process `syz.7.9926'. [ 592.458420][ T401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.464075][ T404] netlink: 'syz.7.9926': attribute type 6 has an invalid length. [ 592.523129][ T401] loop4: detected capacity change from 0 to 4096 [ 592.577891][ T406] loop8: detected capacity change from 0 to 512 [ 592.599202][ T412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9930'. [ 592.613289][ T406] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.9928: iget: bad i_size value: 2533274857506816 [ 592.616573][ T412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9930'. [ 592.650082][ T419] FAULT_INJECTION: forcing a failure. [ 592.650082][ T419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.663506][ T419] CPU: 0 UID: 0 PID: 419 Comm: syz.7.9931 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 592.663546][ T419] Tainted: [W]=WARN [ 592.663553][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 592.663565][ T419] Call Trace: [ 592.663572][ T419] [ 592.663580][ T419] __dump_stack+0x1d/0x30 [ 592.663608][ T419] dump_stack_lvl+0xe8/0x140 [ 592.663669][ T419] dump_stack+0x15/0x1b [ 592.663689][ T419] should_fail_ex+0x265/0x280 [ 592.663728][ T419] should_fail_alloc_page+0xf2/0x100 [ 592.663777][ T419] __alloc_frozen_pages_noprof+0xff/0x360 [ 592.663821][ T419] alloc_pages_mpol+0xb3/0x250 [ 592.663889][ T419] vma_alloc_folio_noprof+0x1aa/0x300 [ 592.663958][ T419] handle_mm_fault+0xec2/0x2be0 [ 592.664028][ T419] ? mas_walk+0xf2/0x120 [ 592.664114][ T419] do_user_addr_fault+0x636/0x1090 [ 592.664227][ T419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 592.664328][ T419] exc_page_fault+0x62/0xa0 [ 592.664364][ T419] asm_exc_page_fault+0x26/0x30 [ 592.664458][ T419] RIP: 0033:0x7fa86ac9bfbb [ 592.664477][ T419] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 592.664501][ T419] RSP: 002b:00007fa869354e10 EFLAGS: 00010246 [ 592.664521][ T419] RAX: 00007fa869356f30 RBX: 00007fa86aee6620 RCX: 0000000000000000 [ 592.664537][ T419] RDX: 00007fa869356f78 RSI: 00007fa86ad4dbf8 RDI: 00007fa869354e30 [ 592.664553][ T419] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 592.664568][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.664631][ T419] R13: 0000000000000000 R14: 00007fa86af15fa0 R15: 00007ffda36a4b98 [ 592.664654][ T419] [ 592.664667][ T419] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 592.695404][ T421] SELinux: failed to load policy [ 592.906307][ T426] loop8: detected capacity change from 0 to 512 [ 592.977194][ T433] loop7: detected capacity change from 0 to 1024 [ 593.008224][ T441] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9940'. [ 593.012326][ T433] netlink: 'syz.7.9937': attribute type 3 has an invalid length. [ 593.034020][ T441] bond0 (unregistering): Released all slaves [ 593.071877][ T449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9943'. [ 593.125221][ T449] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9943'. [ 593.134856][ T452] loop5: detected capacity change from 0 to 512 [ 593.142530][ T452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.178399][ T457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9946'. [ 593.187429][ T457] netlink: 'syz.8.9946': attribute type 21 has an invalid length. [ 593.319750][ T470] loop8: detected capacity change from 0 to 512 [ 593.329395][ T473] netlink: 'syz.0.9952': attribute type 21 has an invalid length. [ 593.337447][ T473] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9952'. [ 593.357594][ T473] netlink: 'syz.0.9952': attribute type 5 has an invalid length. [ 593.415716][ T479] netlink: 'syz.0.9953': attribute type 3 has an invalid length. [ 593.547193][ T497] loop7: detected capacity change from 0 to 1024 [ 593.621479][ T514] loop8: detected capacity change from 0 to 512 [ 593.697399][ T529] loop8: detected capacity change from 0 to 1024 [ 593.745808][ T535] loop8: detected capacity change from 0 to 512 [ 593.787322][ T416] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 593.839673][ T540] loop8: detected capacity change from 0 to 1024 [ 594.162548][ T555] loop4: detected capacity change from 0 to 512 [ 594.170930][ T555] EXT4-fs (loop4): orphan cleanup on readonly fs [ 594.178150][ T555] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9975: bg 0: block 248: padding at end of block bitmap is not set [ 594.192718][ T555] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9975: Failed to acquire dquot type 1 [ 594.205001][ T555] EXT4-fs (loop4): 1 truncate cleaned up [ 594.213870][ T555] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.9975: deleted inode referenced: 12 [ 594.228072][ T555] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.9975: deleted inode referenced: 12 [ 594.240052][ T555] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.9975: deleted inode referenced: 12 [ 594.251902][ T555] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.9975: deleted inode referenced: 12 [ 594.268056][ T555] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.9975: deleted inode referenced: 12 [ 594.283786][ T558] loop5: detected capacity change from 0 to 512 [ 594.297637][T28254] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 594.309995][T28254] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 594.406942][ T565] loop7: detected capacity change from 0 to 128 [ 594.551113][T24174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.614027][ T575] bio_check_eod: 305 callbacks suppressed [ 594.614047][ T575] syz.7.9979: attempt to access beyond end of device [ 594.614047][ T575] loop7: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 594.626187][ T578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.650266][T24174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.653289][ T578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.664503][ T575] syz.7.9979: attempt to access beyond end of device [ 594.664503][ T575] loop7: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 594.682498][ T575] syz.7.9979: attempt to access beyond end of device [ 594.682498][ T575] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 594.706123][ T575] syz.7.9979: attempt to access beyond end of device [ 594.706123][ T575] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 594.727136][T24174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.739558][ T575] syz.7.9979: attempt to access beyond end of device [ 594.739558][ T575] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 594.770199][ T575] syz.7.9979: attempt to access beyond end of device [ 594.770199][ T575] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 594.784245][ T575] syz.7.9979: attempt to access beyond end of device [ 594.784245][ T575] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 594.798326][ T575] syz.7.9979: attempt to access beyond end of device [ 594.798326][ T575] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 594.815014][T24174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.821247][ T575] syz.7.9979: attempt to access beyond end of device [ 594.821247][ T575] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 594.839890][ T575] syz.7.9979: attempt to access beyond end of device [ 594.839890][ T575] loop7: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 594.893323][ T598] FAULT_INJECTION: forcing a failure. [ 594.893323][ T598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.906564][ T598] CPU: 0 UID: 0 PID: 598 Comm: syz.8.9987 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 594.906675][ T598] Tainted: [W]=WARN [ 594.906683][ T598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.906738][ T598] Call Trace: [ 594.906746][ T598] [ 594.906754][ T598] __dump_stack+0x1d/0x30 [ 594.906778][ T598] dump_stack_lvl+0xe8/0x140 [ 594.906801][ T598] dump_stack+0x15/0x1b [ 594.906858][ T598] should_fail_ex+0x265/0x280 [ 594.906886][ T598] should_fail+0xb/0x20 [ 594.906911][ T598] should_fail_usercopy+0x1a/0x20 [ 594.906985][ T598] _copy_to_user+0x20/0xa0 [ 594.907023][ T598] simple_read_from_buffer+0xb5/0x130 [ 594.907052][ T598] proc_fail_nth_read+0x100/0x140 [ 594.907082][ T598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 594.907136][ T598] vfs_read+0x1a0/0x6f0 [ 594.907163][ T598] ? __rcu_read_unlock+0x4f/0x70 [ 594.907182][ T598] ? __fget_files+0x184/0x1c0 [ 594.907201][ T598] ksys_read+0xda/0x1a0 [ 594.907276][ T598] __x64_sys_read+0x40/0x50 [ 594.907375][ T598] x64_sys_call+0x2d77/0x2fb0 [ 594.907438][ T598] do_syscall_64+0xd2/0x200 [ 594.907455][ T598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 594.907551][ T598] ? clear_bhb_loop+0x40/0x90 [ 594.907592][ T598] ? clear_bhb_loop+0x40/0x90 [ 594.907618][ T598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.907645][ T598] RIP: 0033:0x7f86293ad3bc [ 594.907665][ T598] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 594.907690][ T598] RSP: 002b:00007f8627a0f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.907707][ T598] RAX: ffffffffffffffda RBX: 00007f86295d5fa0 RCX: 00007f86293ad3bc [ 594.907747][ T598] RDX: 000000000000000f RSI: 00007f8627a0f0a0 RDI: 0000000000000006 [ 594.907759][ T598] RBP: 00007f8627a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 594.907769][ T598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.907780][ T598] R13: 0000000000000000 R14: 00007f86295d5fa0 R15: 00007fffc69a7268 [ 594.907797][ T598] [ 595.191661][ T601] loop8: detected capacity change from 0 to 512 [ 595.200787][ T601] EXT4-fs mount: 162 callbacks suppressed [ 595.200831][ T601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.221272][T24174] bond0 (unregistering): Released all slaves [ 595.271631][T24174] hsr_slave_0: left promiscuous mode [ 595.277710][T24174] hsr_slave_1: left promiscuous mode [ 595.289046][T24174] veth1_vlan: left promiscuous mode [ 595.294400][T24174] veth0_vlan: left promiscuous mode [ 595.329377][T29447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.425476][ T581] chnl_net:caif_netlink_parms(): no params data found [ 595.494751][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.501994][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.510153][ T581] bridge_slave_0: entered allmulticast mode [ 595.517070][ T581] bridge_slave_0: entered promiscuous mode [ 595.524219][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.530467][ T619] loop8: detected capacity change from 0 to 512 [ 595.531427][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.547205][ T581] bridge_slave_1: entered allmulticast mode [ 595.554283][ T581] bridge_slave_1: entered promiscuous mode [ 595.555211][ T619] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 595.578798][ T619] EXT4-fs (loop8): orphan cleanup on readonly fs [ 595.583227][ T633] FAULT_INJECTION: forcing a failure. [ 595.583227][ T633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.586615][ T619] EXT4-fs error (device loop8): ext4_quota_enable:7124: inode #15: comm syz.8.9993: iget: bad i_size value: 360287970189639690 [ 595.598503][ T633] CPU: 1 UID: 0 PID: 633 Comm: syz.0.9998 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 595.598546][ T633] Tainted: [W]=WARN [ 595.598555][ T633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.598572][ T633] Call Trace: [ 595.598580][ T633] [ 595.598652][ T633] __dump_stack+0x1d/0x30 [ 595.598684][ T633] dump_stack_lvl+0xe8/0x140 [ 595.598756][ T633] dump_stack+0x15/0x1b [ 595.598778][ T633] should_fail_ex+0x265/0x280 [ 595.598822][ T633] should_fail+0xb/0x20 [ 595.598859][ T633] should_fail_usercopy+0x1a/0x20 [ 595.598976][ T633] _copy_from_user+0x1c/0xb0 [ 595.599021][ T633] ___sys_sendmsg+0xc1/0x1d0 [ 595.599064][ T633] __x64_sys_sendmsg+0xd4/0x160 [ 595.599117][ T633] x64_sys_call+0x2999/0x2fb0 [ 595.599149][ T633] do_syscall_64+0xd2/0x200 [ 595.599180][ T633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 595.599288][ T633] ? clear_bhb_loop+0x40/0x90 [ 595.599317][ T633] ? clear_bhb_loop+0x40/0x90 [ 595.599412][ T633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.599518][ T633] RIP: 0033:0x7fb701b9e9a9 [ 595.599539][ T633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.599642][ T633] RSP: 002b:00007fb700207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.599666][ T633] RAX: ffffffffffffffda RBX: 00007fb701dc5fa0 RCX: 00007fb701b9e9a9 [ 595.599684][ T633] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 595.599701][ T633] RBP: 00007fb700207090 R08: 0000000000000000 R09: 0000000000000000 [ 595.599718][ T633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.599734][ T633] R13: 0000000000000000 R14: 00007fb701dc5fa0 R15: 00007ffcd9920818 [ 595.599815][ T633] [ 595.614045][ T635] loop5: detected capacity change from 0 to 1024 [ 595.651453][ T619] EXT4-fs error (device loop8): ext4_quota_enable:7127: comm syz.8.9993: Bad quota inode: 15, type: 2 [ 595.710295][ T635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.713325][ T619] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 595.840166][ T619] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 595.841858][ T581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.857623][ T619] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.859800][ T581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.891980][ T581] team0: Port device team_slave_0 added [ 595.899476][ T581] team0: Port device team_slave_1 added [ 595.905112][T24188] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:58: bg 0: block 393: padding at end of block bitmap is not set [ 595.929945][ T619] EXT4-fs error (device loop8): ext4_lookup:1787: comm syz.8.9993: inode #15: comm syz.8.9993: iget: illegal inode # [ 595.933240][T24188] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 595.954889][T24188] EXT4-fs (loop5): This should not happen!! Data will be lost [ 595.954889][T24188] [ 595.969371][ T581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.976421][ T581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.990460][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.002449][ T581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.023410][ T581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.030447][ T581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.056528][ T581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.098620][ T581] hsr_slave_0: entered promiscuous mode [ 596.109450][ T581] hsr_slave_1: entered promiscuous mode [ 596.117850][ T581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.139907][ T581] Cannot create hsr debugfs directory [ 596.364866][T29447] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.593940][ T665] loop7: detected capacity change from 0 to 1024 [ 596.602789][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 596.602808][ T29] audit: type=1400 audit(15204945.232:92177): avc: denied { write } for pid=659 comm="syz.8.10004" path="socket:[108441]" dev="sockfs" ino=108441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 596.647501][T24174] IPVS: stop unused estimator thread 0... [ 596.754389][ T670] loop5: detected capacity change from 0 to 1024 [ 596.773520][ T670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.798803][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.824896][ T674] loop5: detected capacity change from 0 to 512 [ 596.835422][ T674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.891063][ T677] __nla_validate_parse: 15 callbacks suppressed [ 596.891081][ T677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10012'. [ 596.939842][ T581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 596.950882][ T581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 596.960163][ T581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 596.973016][ T581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 596.997488][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.028817][ T581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.036091][ T690] loop5: detected capacity change from 0 to 1024 [ 597.040768][ T581] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.053567][T24188] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.061150][T24188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.074351][T24160] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.081496][T24160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.117224][ T694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10017'. [ 597.127556][ T694] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10017'. [ 597.169398][ T701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10019'. [ 597.182103][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10019'. [ 597.196786][ T704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10020'. [ 597.202253][ T581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.261665][ T704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10020'. [ 597.277970][ T710] loop5: detected capacity change from 0 to 512 [ 597.287471][ T710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.303239][ T710] bridge0: port 1(syz_tun) entered blocking state [ 597.309917][ T710] bridge0: port 1(syz_tun) entered disabled state [ 597.316838][ T710] syz_tun: entered allmulticast mode [ 597.322809][ T710] syz_tun: entered promiscuous mode [ 597.328915][ T710] bridge0: port 1(syz_tun) entered blocking state [ 597.335438][ T710] bridge0: port 1(syz_tun) entered forwarding state [ 597.339717][ T715] unsupported nlmsg_type 40 [ 597.353108][ T710] syz_tun: left allmulticast mode [ 597.358442][ T710] syz_tun: left promiscuous mode [ 597.363685][ T710] bridge0: port 1(syz_tun) entered disabled state [ 597.370841][ T717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10023'. [ 597.424000][ T581] veth0_vlan: entered promiscuous mode [ 597.439687][ T721] loop7: detected capacity change from 0 to 1024 [ 597.444190][ T581] veth1_vlan: entered promiscuous mode [ 597.459883][ T581] veth0_macvtap: entered promiscuous mode [ 597.469966][ T581] veth1_macvtap: entered promiscuous mode [ 597.482893][ T581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.498058][ T581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.527175][ T581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.536107][ T581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.544963][ T581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.553938][ T581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.581018][ T730] loop7: detected capacity change from 0 to 512 [ 597.593973][ T730] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 597.597568][ T735] loop8: detected capacity change from 0 to 512 [ 597.605217][ T730] EXT4-fs (loop7): orphan cleanup on readonly fs [ 597.624826][ T730] EXT4-fs error (device loop7): ext4_quota_enable:7124: inode #15: comm syz.7.10028: iget: bad i_size value: 360287970189639690 [ 597.635855][T29194] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.650505][T29194] ================================================================== [ 597.656266][ T730] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.10028: Bad quota inode: 15, type: 2 [ 597.658646][T29194] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 597.658699][T29194] [ 597.658706][T29194] read-write to 0xffff888237d26f10 of 8 bytes by task 735 on cpu 1: [ 597.658727][T29194] find_get_block_common+0x4f0/0x960 [ 597.693339][T29194] bdev_getblk+0x325/0x3d0 [ 597.697814][T29194] ext4_getblk+0x1b6/0x510 [ 597.702263][T29194] ext4_bread+0x28/0x110 [ 597.706530][T29194] ext4_quota_read+0xe8/0x260 [ 597.711241][T29194] v2_check_quota_file+0x72/0x150 [ 597.716467][T29194] dquot_load_quota_sb+0x3ae/0x5e0 [ 597.721605][T29194] dquot_load_quota_inode+0x215/0x2f0 [ 597.727029][T29194] ext4_enable_quotas+0x2d1/0x400 [ 597.732086][T29194] ext4_fill_super+0x30d4/0x34e0 [ 597.737042][T29194] get_tree_bdev_flags+0x291/0x300 [ 597.742213][T29194] get_tree_bdev+0x1f/0x30 [ 597.746679][T29194] ext4_get_tree+0x1c/0x30 [ 597.751124][T29194] vfs_get_tree+0x54/0x1d0 [ 597.755668][T29194] do_new_mount+0x207/0x680 [ 597.760478][T29194] path_mount+0x4a4/0xb20 [ 597.764841][T29194] __se_sys_mount+0x28f/0x2e0 [ 597.769550][T29194] __x64_sys_mount+0x67/0x80 [ 597.774188][T29194] x64_sys_call+0xd36/0x2fb0 [ 597.778819][T29194] do_syscall_64+0xd2/0x200 [ 597.783363][T29194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.789273][T29194] [ 597.791609][T29194] read to 0xffff888237d26f10 of 8 bytes by task 29194 on cpu 0: [ 597.799267][T29194] has_bh_in_lru+0x35/0x1f0 [ 597.803813][T29194] smp_call_function_many_cond+0x389/0xbf0 [ 597.809647][T29194] on_each_cpu_cond_mask+0x3c/0x80 [ 597.814773][T29194] invalidate_bh_lrus+0x2a/0x30 [ 597.819652][T29194] invalidate_bdev+0x42/0x70 [ 597.824255][T29194] ext4_put_super+0x624/0x7d0 [ 597.828954][T29194] generic_shutdown_super+0xe3/0x210 [ 597.834274][T29194] kill_block_super+0x2a/0x70 [ 597.838987][T29194] ext4_kill_sb+0x42/0x80 [ 597.843335][T29194] deactivate_locked_super+0x72/0x1c0 [ 597.848752][T29194] deactivate_super+0x97/0xa0 [ 597.853466][T29194] cleanup_mnt+0x269/0x2e0 [ 597.857904][T29194] __cleanup_mnt+0x19/0x20 [ 597.862337][T29194] task_work_run+0x12e/0x1a0 [ 597.866947][T29194] exit_to_user_mode_loop+0xe4/0x100 [ 597.872354][T29194] do_syscall_64+0x1d6/0x200 [ 597.876980][T29194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.882928][T29194] [ 597.885260][T29194] value changed: 0xffff888119d599c0 -> 0xffff888119d59680 [ 597.892389][T29194] [ 597.894722][T29194] Reported by Kernel Concurrency Sanitizer on: [ 597.900913][T29194] CPU: 0 UID: 0 PID: 29194 Comm: syz-executor Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 597.915173][T29194] Tainted: [W]=WARN [ 597.918989][T29194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.929120][T29194] ================================================================== [ 597.939304][ T29] audit: type=1400 audit(15204946.540:92178): avc: denied { write } for pid=3296 comm="syz-executor" path="pipe:[2216]" dev="pipefs" ino=2216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 597.963137][ T735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.019109][ T730] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 598.046727][ T730] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 598.055998][ T730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 598.087526][ T730] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.177135][ T734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.251516][T24174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.330709][T24174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.401264][T24174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.461583][T24174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.703846][T24174] tipc: Left network mode [ 598.710792][T24174] hsr_slave_0: left promiscuous mode [ 598.716813][T24174] hsr_slave_1: left promiscuous mode [ 598.725607][T24174] veth1_macvtap: left promiscuous mode [ 598.731146][T24174] veth0_macvtap: left promiscuous mode [ 598.736805][T24174] veth1_vlan: left promiscuous mode [ 598.742093][T24174] veth0_vlan: left promiscuous mode [ 599.266312][T24174] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.315372][T24174] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.395862][T24174] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.456637][T24174] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.541016][T24174] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.588392][T24174] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.629358][T24174] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.689909][T24174] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.754264][T24174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.801246][T24174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.872884][T24174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.934127][T24174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.104648][T24174] bond0 (unregistering): Released all slaves [ 600.166832][T24174] bond0 (unregistering): Released all slaves [ 600.217321][T24174] bond0 (unregistering): Released all slaves [ 600.271748][T24174] hsr_slave_0: left promiscuous mode [ 600.277535][T24174] hsr_slave_1: left promiscuous mode [ 600.284564][T24174] hsr_slave_0: left promiscuous mode [ 600.290290][T24174] hsr_slave_1: left promiscuous mode [ 600.297908][T24174] hsr_slave_0: left promiscuous mode [ 600.303550][T24174] hsr_slave_1: left promiscuous mode [ 600.317805][T24174] veth1_macvtap: left promiscuous mode [ 600.323312][T24174] veth0_macvtap: left promiscuous mode [ 600.328899][T24174] veth1_vlan: left promiscuous mode [ 600.334216][T24174] veth0_vlan: left promiscuous mode [ 600.340101][T24174] veth1_macvtap: left promiscuous mode [ 600.345609][T24174] veth0_macvtap: left promiscuous mode [ 600.351256][T24174] veth1_vlan: left promiscuous mode [ 600.356516][T24174] veth0_vlan: left promiscuous mode [ 600.362661][T24174] veth1_macvtap: left promiscuous mode [ 600.368223][T24174] veth0_macvtap: left promiscuous mode [ 600.373976][T24174] veth1_vlan: left promiscuous mode [ 600.379326][T24174] veth0_vlan: left promiscuous mode [ 601.931840][T24174] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.991350][T24174] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.051089][T24174] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.101348][T24174] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.163255][T24174] bridge_slave_1: left allmulticast mode [ 602.169136][T24174] bridge_slave_1: left promiscuous mode [ 602.174893][T24174] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.182850][T24174] bridge_slave_0: left allmulticast mode [ 602.188580][T24174] bridge_slave_0: left promiscuous mode [ 602.194305][T24174] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.265282][T24174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.275148][T24174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.284651][T24174] bond0 (unregistering): Released all slaves [ 602.336313][T24174] hsr_slave_0: left promiscuous mode [ 602.342093][T24174] hsr_slave_1: left promiscuous mode [ 602.347722][T24174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.355155][T24174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.362992][T24174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.370396][T24174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.380679][T24174] veth1_macvtap: left promiscuous mode [ 602.386559][T24174] veth0_macvtap: left promiscuous mode [ 602.392122][T24174] veth1_vlan: left promiscuous mode [ 602.397451][T24174] veth0_vlan: left promiscuous mode [ 602.459082][T24174] team0 (unregistering): Port device team_slave_1 removed [ 602.469291][T24174] team0 (unregistering): Port device team_slave_0 removed