last executing test programs: 8m25.064336528s ago: executing program 32 (id=758): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101000, 0xa2) execveat(r2, &(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000500)='wfdno', &(0x7f0000000540)='trans=fd,', &(0x7f0000000580)='9p_client_res\x00']}, &(0x7f0000000680)={[&(0x7f0000000600)='GPL\x00', &(0x7f0000000640)='wfdno']}, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) set_mempolicy(0x1, &(0x7f0000000200)=0x7, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@private2, 0x4e21, 0xcaa, 0x4e23, 0x0, 0xa, 0x1c0, 0xb0, 0x5e, 0x0, r7}, {0x2, 0x6, 0x5, 0x6, 0xfffffffffffffff7, 0x23, 0x3, 0x6}, {0x4, 0x80000000, 0x4, 0x229e}, 0x2, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x3502, 0x2, 0x1, 0x6, 0x3, 0x6, 0x80}}, 0xe8) r8 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 7m42.823706841s ago: executing program 33 (id=1947): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000600"/28], 0x50) sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7m41.184317374s ago: executing program 34 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000340)=0x5, 0x0, 0xa, 0xff, 0x0, 0x1, 0x5c, 0x8001}}], 0x58}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) unlinkat(0xffffffffffffffff, 0x0, 0x200) 7m32.360585869s ago: executing program 35 (id=2119): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000017c0)={0x7fffffff, 0x2, 'client0\x00', 0x3, "6bc1444dfc6765c4", "e493cce62669f1e53411a5dd2175f2d8cbe40a7b470a9aa77184d0ed9f04957b", 0x8, 0x2}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x453, 0x4, 0x70bd2f, 0xa0000000, "af"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 7m32.310264923s ago: executing program 36 (id=2121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x10, 0x5}, 0x86) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f0000000980)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@errors_remount}, {@orlov}, {@usrquota}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3e}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x40000084) 7m31.908947306s ago: executing program 37 (id=2125): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) 7m29.996705231s ago: executing program 38 (id=2145): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0)={[], 0x1008}, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 7m23.746985558s ago: executing program 39 (id=2198): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') close(r0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="658c6c029a01490b77bfe3b1a54ce9e3a65c70", 0x13}], 0x1) 7m23.536464544s ago: executing program 40 (id=2202): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002240)=@delchain={0x34, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffff}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) (async) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000026c0)=0x3d) (async) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x6, 0x455, 0x8001, 0xa, "21af87a5a0b03f28f155795c8e7d57cc3575f0"}) ioctl$TCSETA(r4, 0x5406, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) (async) iopl(0x3) (async) r5 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001fc0), 0x8}, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') (async) r7 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r7, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x0, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x80010, 0xffffffffffffffff, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 7m21.674646725s ago: executing program 41 (id=2214): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1, 0x0, 0x1000000000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002d822e0c00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000003000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0x5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000140)=0x28, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, 0x0, &(0x7f0000000600)) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa6}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) r15 = dup(r13) connect$inet6(r15, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r15, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0x2000007d, &(0x7f0000000b00)=ANY=[@ANYRES8=r5, @ANYRES16=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRESDEC=r7, @ANYRES64=r12, @ANYBLOB="46ef84c05336fac81f1bba700d7d3333c6291e10f94dade669a59035066c49e8d75c568f6e4e76c7652a3632e73f59444c4a100d3eb4bb0dcbed05f359d8194601ab49b8540d37a93317de5f7058381f8cb8df34819761a176f64a018f06d8cee404945a179ded872e0b0ace6912e5f605b4c81631e469db36d308b5c25b04ded43d9792878f6421e4440d81961ad4fdcad817", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, r15}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x38, 0x1, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5230}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m21.344780842s ago: executing program 42 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x3}, &(0x7f0000000340)=0x5, 0x0, 0xa, 0xff, 0x0, 0x1, 0x5c, 0x8001}}], 0x58}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x26c, @remote, 0x10}]}, &(0x7f0000000140)=0x10) 7m14.622694397s ago: executing program 43 (id=2260): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)='%pi6 \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) gettid() setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) semtimedop(0x0, &(0x7f00000006c0)=[{0x0, 0x6, 0x3000}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000409500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) 7m14.060741213s ago: executing program 44 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 7m11.244860711s ago: executing program 45 (id=2296): r0 = syz_io_uring_setup(0x5c6, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mq_open(&(0x7f0000001040)='cpuset.cpus\x00', 0x40, 0x1, &(0x7f0000001080)={0xe, 0x8, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 7m7.721103246s ago: executing program 46 (id=2328): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000700"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x2004c000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 7m7.633839163s ago: executing program 47 (id=2332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') stat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="63d2e16ec5a6e85cb6c6bec23b63af7852f0fa137aae40a567b57b393605ec1b10c577d8b7b0beb4910c2d7cdb52720b8f80eadc032204b0dfa65b7261b68a8e1386fb644195a1da0d167d97dcee8a6ace34e746b08b43d96b398fea0cf6402080939320c2d1c089edbbab5d2ab60da5191f1f19d0f449f7c2613a3c513a573159a1eda3cc3e49c4b09f240120fb91cb979507447059471c7aadc55e2f61785fe29d470a1c6f52e95d1aabc16b1b3e9c7f81eddc0eca06f2c17fd3ef174373c946feef31ae4cf2e686307d2511b71db9087b154caa57a5daf47a85add253abeb6b2bcdfc21cfb837f79265011e2e74021e74e4194b8fc4fc8ffa32f9733f69aedce7c65ac4e6e7b09f1f2fa48a00f894d04d1a03722fb6d9578eafb5018847894517c4f5d7d421dfc8d3a65f1a2f7d6fe391560a57f069d7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000600"/28], 0x50) sendto$inet6(r3, 0x0, 0x0, 0x800, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1410, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="240003"], 0x10e0}}, 0x0) 7m0.76967127s ago: executing program 48 (id=2387): getgroups(0x3, &(0x7f00000004c0)=[0x0, 0xee01, 0xee01]) 7m0.161592629s ago: executing program 49 (id=2396): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x44, 0xffffffffffffffff}], &(0x7f0000000500)='GPL\x00', 0xc8, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m59.681822338s ago: executing program 50 (id=2402): sigaltstack(0x0, 0x0) 6m58.992356684s ago: executing program 51 (id=2408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb80}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) fchmod(0xffffffffffffffff, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) syz_usb_connect(0x2, 0x803, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0x5a, 0xa2, 0x48, 0x40, 0x5c6, 0x6000, 0x6a7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f1, 0x4, 0x2, 0x9, 0x80, 0x2, [{{0x9, 0x4, 0x6, 0x6, 0xe, 0xb1, 0xb, 0xcd, 0xe5, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, ',+g'}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x40, 0xfffe, 0x8}}, @generic={0x3d, 0x22, "8d736b763249e738692980c38c76ac0b10bc2f4ed99622afb1c9bd96d4e26c8835f302e5d199f84e8ee7e2a7b97a089a41d287987a97e084c7d106"}], [{{0x9, 0x5, 0xa, 0xa, 0x10, 0x1, 0x9, 0x59, [@generic={0xea, 0xa, "82edf01d45e7c9a269dd93830f0f482ac29d26b1d884f579de99f228fe915a7f4925d2d9999cbc599d71e6411045029637e96ba9bcb6b362f82d5a283109461678f7efc9b9504f22d83bd0380e45b3e9912b62d809e9e5fe757ebc4569aaea6deff1470555b0cb5abd1dc14b73138ce493ebdb02b06fec1c92a75a6f16973958fb2d232a4b681cb0298b22c45ec80ed12beb0c96254fd6c1a5ee718da7266c9388e2a8b5bbce2c828d124805edc242938bdaa00916bfa115e8fcfe93f97558b4ac776af379c2fd1b4f0e590c11734d4a0ab29332c54c0af1b272ca8ac8e22f3925de04218a2b2525"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x0, 0x96, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x1, 0x8, 0x4}}, {{0x9, 0x5, 0x5, 0x1, 0x400, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x37b0bb0b9c9eabac, 0x0, 0x20, 0x1, 0x8, 0x80}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0xf3, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x1b, 0x3ff, 0x9, 0x3}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x4, 0xa8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xaa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x98, 0xfffd}]}}, {{0x9, 0x5, 0x0, 0x3, 0x5ff, 0x0, 0xf5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2c, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x7, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xb6}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8}, @generic={0x3e, 0x10, "20f86a3a0d7dd4c24c6577a20b0e56fc6e1740a836f081530647ec894769d99d762bfaec89351b2011519426d823d506aad0df0bf755b8e755da6704"}]}}, {{0x9, 0x5, 0xe, 0x6, 0x20, 0x9, 0x9e, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6d}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x3ff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x9, 0x1, 0xc, [@generic={0x59, 0x22, "ff050bc4b8327c2cf500d30c11c88be5d265d12ee1850385d4e9b328205d200b416d7e85b948b7791465a9a539fed397beecf2f250050a8d47c66ea1ec01e98552d51e205f8f3b76c88924517a75e0607ab70c605961f8"}, @generic={0x29, 0xf, "83adb9837eadce9806a1346c183b8c58eca84c37cbd189dda2e5cf4d580c542265a5511e4e6f6c"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x7, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xff}]}}]}}, {{0x9, 0x4, 0x8, 0x6, 0x1, 0xd2, 0x90, 0x59, 0x40, [], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0x8, 0xe}}]}}, {{0x9, 0x4, 0x29, 0xc8, 0xd, 0xff, 0x4, 0x18, 0x1, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "f62a"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x4, 0xf}, [@mdlm_detail={0x3c, 0x24, 0x13, 0x7, "ef8c6415af7ac265e823dd050da37562b622099ff10421c9d43604fa37acdb70634d499d72932b23fdf24bb6355e1345cd3cf5ae482ff507"}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x8, 0x7, 0x6}]}, @uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x4, 0xff, "16ce"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x22, 0x1, 0x6, 0x4, "c38e98"}]}], [{{0x9, 0x5, 0x9, 0xc, 0x400, 0xb, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x7, 0xd1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xbd, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0xc7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x3}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0xd, 0x1}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x3, 0xf1, 0xf9, [@generic={0xe6, 0x31, "598abdeaf4925eac633eb35eb69554b7f5890f5f8391c1ee37e7f8422669c7fb328a54e94a84381c48ad14eaddbeda17e12fce034ca2ee6ad7179561311d72e3c7ca583d060871c6ae0dfba3d6e2ae26c07436a8b19db34015030b4976b5515f2ae385d6c95602c36f7e5eddcf01a43f767c8437878fb6bf75e0efdfe3e92ac5b2008774cfee7eb048b7d998c6cb01c7915965b96051a030dda5c2fbe6cf74aa3238e77c171659dc144970b36d62ab86e1d4ce510bf011f1533405c443d360414c2b2f7d1ec22812147d15d13f0e8cbe9d05ec139bd8126e4b537f81513d574b92bf379a"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x4, 0x2, 0x4}}, {{0x9, 0x5, 0xa, 0xa, 0x200, 0x9, 0x6, 0x7}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x5, 0x5, 0xf8}}, {{0x9, 0x5, 0xd, 0x8, 0x3bf, 0xf9, 0x5, 0xc9, [@generic={0x42, 0x9, "539897b03f02d377f1edf55b5b00f16d4ffc343bb30acd18d2ed283dd438c83fbcddf798d6965466db4b4e7dcf418175707a8d2332f126cd32b5d54cc653093c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0x0, 0x9, [@generic={0xa0, 0x24, "5d6cc360a983a5f369e19d716b85dc15ef669d71ea637a39d110860b6ab731d31319df076c51808c29dc74b3d3d69bf9f8a076fd6ad4eb829659fd51502c036510fa17a1553489bf20c67f17aba44b2720af89f2262b7d3ab3e770b74793899954726165e04f13ca65f49d7a56d080d24ce75893a7814d37ed5af53a75cf4b85d9c8cacbd23f72ce21290ca8c78c850acb6a15af85560ead99db64ebe51c"}, @generic={0x9d, 0xe, "e77266f263bc719e35c866b48ca4c2e1c9058abc8c1d645016c78d78ba123fdf80fa23e1ab1b77657d512d40883408a7f14f59c746f6d3d49b5d13f9fb482891a133342a9554ad7be24fb32e9750ebdd06a7dae0e24daf3dd5e815d59b4369d57d70d24f9e38cd617727ce16cd1501d9614ab565c86de515b814fd6c7db4cbc778c3aa857de8b6f09805a16524cf195da4b491ee1f48131422c629"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xe, 0x80}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x8, 0xa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x98, 0x6, 0x8}}]}}, {{0x9, 0x4, 0x60, 0x4, 0x2, 0xe, 0x1, 0x0, 0xa, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x273}}, @generic={0xfa, 0x30, "0bcf488b8ddbe567d9a5fb67c4ae66f5e6ede3a9ba33c11ca84612938fb6020e41d8d26202dad24f9cac72109b1fa3b41556fdbb450a17ddf5aa580ffe656b33f14d28df19f7e73dde5fa3dc46ef924be6819dc48afd8eba5489209015629a4261df49a6b3f672976afba384937e60e46edf769e40053333f1ac78267515843f7359b6e8bedc1282424a0c2671fc2c04fcef108577b92abe01317d24ebe5324db42b7494c7d93ac1bb4cd7ab7f99aacb03afeb5ebfa50178b8dbb241a8c62a0c14b1c442a18623df43f9a6b374bb3f83efe27eeb79bc7ec4312414a7aff57cae3fbebfa2fa33a206adc3db860764c12a6c05c60953cec486"}], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x32, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8}, @generic={0x79, 0x23, "36a0b373ff885632e2939651219df1258f4372fc8550869a73dae29c82a65feeba1279bdb7d64237badd88b5d1ef1f513c3536d9d4beacb2851f68872487954321d53fe3b9592fc2cab9ec5048eedf3d009468d3473d422a8618d5a36c4d8749f898fb5f0a93efb1f8cb74b2ba0af5a1e0ae9a371f8910"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x8, 0x5c, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x6}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x20, 0x2, 0x0, 0x8, 0x2}, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x7d9f357, 0x960f, 0x1, [0x0, 0x3f0f, 0xc027, 0xf, 0x30, 0xff3f3f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x7, 0x3, 0x1ff, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xf, 0x8}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41a}}]}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c50f40000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084210000"], 0x24}}, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$RTC_PIE_OFF(r6, 0x7006) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41181000, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r8}) 6m52.019437009s ago: executing program 52 (id=2481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f00000010c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r1, 0x10, 0x160483b7, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000011c0)=@req3={0x81, 0x3, 0x3, 0x5, 0x7fff, 0x7, 0x3}, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r11 = eventfd(0x10) io_submit(r10, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r9, &(0x7f00000003c0)='z', 0x1, 0xcead, 0x0, 0x5, r11}]) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) setns(r4, 0x24020000) 6m45.96274959s ago: executing program 54 (id=2541): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, r1, &(0x7f0000000080)='E', 0x1, 0x8000}]) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x38e869a5bbd4abba, 0x2e, 0x5f]}}, 0x0, 0x66}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) clock_nanosleep(0xfcfdffff, 0x0, 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x1, 0x3, 0x35, 0x7}]}) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) io_cancel(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f0000000780)="0f20b18f2ae556aa3b2bc01074d92e02ee5f409aed7b7334ca5bdfb71f145fbfa41500b449a744bb873590acc97c3e2b81b19b751a1bdd52117394728d7bfb46eb955162e0e7", 0x46, 0x5, 0x0, 0x0, r1}, &(0x7f0000000800)) write$cgroup_subtree(r1, &(0x7f0000000840)={[{0x2d, 'net'}, {0x2d, 'net_prio'}, {0x2b, 'net_prio'}, {0x2b, 'hugetlb'}, {0x2b, 'rdma'}, {0x688c73019f1c67ce, 'cpuset'}, {0x2d, 'net'}, {0x2b, 'blkio'}]}, 0x3c) fchown(r4, 0x0, 0x0) 6m43.326045963s ago: executing program 55 (id=2560): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 6m41.194645426s ago: executing program 3 (id=2580): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 6m41.077656385s ago: executing program 56 (id=2581): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3, 0x32e, &(0x7f0000000a00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x60) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x12, 0x12, r0, 0x0) fadvise64(r0, 0x4, 0x351e95c1, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) futex(0x0, 0x5, 0x10000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 6m41.054007367s ago: executing program 3 (id=2583): link(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') 6m41.053348547s ago: executing program 3 (id=2584): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x0, 0x4, 0x1, 0x1, 0xfffffffffffffff8}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x6, 0x4, 0xfffffffc, 0x970}, 0x10, 0x1b031, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x0, 0x1, 0xb, 0x8}, {0x4, 0x2, 0xa, 0x9}, {0x5, 0x2, 0x5, 0xa}, {0x2, 0x4, 0xc, 0xa}, {0x1, 0x4, 0x4, 0x2}, {0x5, 0x5, 0x5, 0xc}, {0x4, 0x5, 0xa, 0x1}, {0x2, 0x3, 0x4, 0x8}], 0x10, 0xffffff7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r0, 0x0, 0xc5, 0x14, &(0x7f0000001840)="e90dc813624a5a6e822de87b7306ebd88d18ecb1a06d086d59ccb53b0107a8a6a6add2259f73984eaf028f633235f6f1fd39eea5e0ae8334337642c5ea8a13106131bcba32e7355573cea35529c17d74ab34dc5deedfc2ac2f32336cd441e5258bfc868475f46b98a9f6f9de01e77a10e12dd4e1fe7437f48c254427befe58b364658b8f15c2e4a7f18819c64e7b92eec59b80bb6b6e885ceffa14abc68212d100047740840691b0239319863026b4f25afce68ab9b6ef1ec02b85ab2c91b25560cb57af68", &(0x7f0000000540)=""/20, 0xfffff004, 0x0, 0x38, 0x26, &(0x7f0000000580)="07654ee3f0a991864f713e5bb4981cc1776443222cdc4371a821d202d45d697328ae425cae309509d08b1420765b018f84f8e1f97f004748", &(0x7f0000001940)="05c2317dbe177860a9c8312d7e0e1fa80870b05f14e4f137e49343d6d4ddd8b67e85bc573d02", 0x6, 0x0, 0x10001}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r3, &(0x7f00000014c0)="a020179e", 0x4) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x0, 0xfffffffa, {0x7, 0x0, 0xa, 0x6, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0xffffff81}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0xb, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x1, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0x4b, 0x4, 0x6, 0x9, 0x2, 0x7fff, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x7, 0x7, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x8003, 0x0, 0x0, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x9, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x7, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x4, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x8, 0x3, 0x0, 0x9, 0x5, 0x5, 0x803, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x6, 0x8, 0x9, 0x400, 0x7f, 0x4, 0x4, 0x5000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xf, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x10000517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x2, 0x9, 0x2, 0x1000, 0x812, 0x0, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x0, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0x6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x8, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x800, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x326, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0x4, 0x1, 0xfffffffe, 0x1ff, 0x8, 0x7ff, 0x8, 0x1, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x80000003, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0xd020, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x20075, 0x26, 0x0, 0xffffffff, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x12, 0x69, 0x0, 0xffff, 0x7, 0x1800, 0xc, 0x8, 0x271, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x15, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xbe, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x3, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, r8, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x104200c0}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r8, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200004d4}, 0x4000000) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffff7, @mcast2, 0x4}, 0x1c) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x3, 0x8) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = dup(r10) sendmsg$inet(r11, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0x18}, 0x2000c880) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x104e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000a3fdc58408004a2610400068000006069027db341600000000018311c475bd3cd988ea87576118659b0b0800000000000000", @ANYRES32=r9, @ANYRES32=r12, @ANYBLOB="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"], 0x0) 6m40.140107671s ago: executing program 3 (id=2585): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x44, 0xffffffffffffffff}], &(0x7f0000000500)='GPL\x00', 0xc8, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m39.947258748s ago: executing program 3 (id=2586): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1d5002, 0x0) write(r3, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8005, 0x1, 0x80, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) truncate(&(0x7f0000000000)='./bus\x00', 0x6) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES16=r0, @ANYRESHEX=r4], &(0x7f0000000880)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000008c0)='xprtrdma_createmrs\x00', r7, 0x0, 0x5}, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$P9_RREADLINK(r5, &(0x7f0000000340)={0xe, 0x17, 0x3, {0x5, './bus'}}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x1}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_SHOW_PORTS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r11, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m39.674393029s ago: executing program 3 (id=2592): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000340)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e18, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES8=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x5) acct(&(0x7f00000015c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) close(0x4) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/245, 0xf5}, {&(0x7f0000000280)=""/64, 0x40}], 0x4, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/237, 0xed}, {&(0x7f0000000b00)=""/193, 0xc1}], 0x2, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001180)=[{&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/23, 0x17}, {&(0x7f0000000ec0)}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/194, 0xc2}, {&(0x7f0000001000)=""/128, 0x80}, {&(0x7f0000001080)=""/175, 0xaf}, {&(0x7f0000001140)=""/13, 0xd}], 0x8, &(0x7f0000001200)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x20, &(0x7f0000001300)={0x77359400}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f0000ffd000/0x2000)=nil, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRESOCT=r4, @ANYBLOB="38dfe319841507e17a4c9c55e9c42da6803977ae29c964f1dcb19b9bbd487df8f1a43f7a53b8a2d495d5e990885d2a5cd07b3214916d17f6dab4174c582464e88f10a95211a07938bd50425d6d5d56639ebf2afcca9e1f60c8c5cdabbc638952cf8a8bc51b4121a8cc6bcc72062b4d0164022ef635ec642c3dfbc58b5c76344c"]) timer_create(0x1, &(0x7f0000000180)={0x0, 0x24, 0x4}, &(0x7f0000000240)) 6m39.644618281s ago: executing program 57 (id=2592): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000340)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e18, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES8=0x0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x5) acct(&(0x7f00000015c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) close(0x4) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/245, 0xf5}, {&(0x7f0000000280)=""/64, 0x40}], 0x4, &(0x7f00000008c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/237, 0xed}, {&(0x7f0000000b00)=""/193, 0xc1}], 0x2, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000001180)=[{&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000ec0)=""/23, 0x17}, {&(0x7f0000000ec0)}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/194, 0xc2}, {&(0x7f0000001000)=""/128, 0x80}, {&(0x7f0000001080)=""/175, 0xaf}, {&(0x7f0000001140)=""/13, 0xd}], 0x8, &(0x7f0000001200)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x20, &(0x7f0000001300)={0x77359400}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f0000ffd000/0x2000)=nil, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRESOCT=r4, @ANYBLOB="38dfe319841507e17a4c9c55e9c42da6803977ae29c964f1dcb19b9bbd487df8f1a43f7a53b8a2d495d5e990885d2a5cd07b3214916d17f6dab4174c582464e88f10a95211a07938bd50425d6d5d56639ebf2afcca9e1f60c8c5cdabbc638952cf8a8bc51b4121a8cc6bcc72062b4d0164022ef635ec642c3dfbc58b5c76344c"]) timer_create(0x1, &(0x7f0000000180)={0x0, 0x24, 0x4}, &(0x7f0000000240)) 6m28.399530813s ago: executing program 9 (id=2724): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e2300000600010002000000080003"], 0x38}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00fcdbdf25240000000c00e0cc806295ccc2b3b0018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 6m28.372356085s ago: executing program 9 (id=2725): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 6m27.485390197s ago: executing program 9 (id=2734): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x60, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6m26.989103147s ago: executing program 9 (id=2740): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x44, 0xffffffffffffffff}], &(0x7f0000000500)='GPL\x00', 0xc8, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m26.913390234s ago: executing program 9 (id=2744): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 6m26.599348529s ago: executing program 9 (id=2746): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82) write(r5, &(0x7f0000004200), 0x0) sendfile(r5, r4, 0x0, 0x3ffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24010040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000002c0)=0x1) 6m26.599070269s ago: executing program 58 (id=2746): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82) write(r5, &(0x7f0000004200), 0x0) sendfile(r5, r4, 0x0, 0x3ffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24010040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f00000002c0)=0x1) 6m26.030486355s ago: executing program 6 (id=2750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m26.029718655s ago: executing program 6 (id=2752): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000888500000073000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00fcdbdf25240000000c00e0cc806295ccc2b3b0018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 6m25.982509129s ago: executing program 6 (id=2753): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x102f) 6m25.928744173s ago: executing program 6 (id=2755): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x44, 0xffffffffffffffff}], &(0x7f0000000500)='GPL\x00', 0xc8, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m25.860532399s ago: executing program 6 (id=2758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 6m25.289117265s ago: executing program 6 (id=2770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 6m25.288848595s ago: executing program 59 (id=2770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 6m20.793576869s ago: executing program 7 (id=2771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f0000000b40)={0x100, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff], 0x1}, 0x58) 6m20.719480316s ago: executing program 7 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="5825be57aff935e67ca2746357d1787935589db1", 0x14}], 0x1}}], 0x1, 0x840) 6m20.66532531s ago: executing program 7 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000100), 0x1, 0x518, &(0x7f00000019c0)="$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") 6m20.495998844s ago: executing program 7 (id=2816): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x44, 0xffffffffffffffff}], &(0x7f0000000500)='GPL\x00', 0xc8, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m20.362617145s ago: executing program 7 (id=2819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f0000000b40)={0x100, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff], 0x1}, 0x58) 6m19.289010621s ago: executing program 7 (id=2828): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r5, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r9, 'id1\x00'}) sendmsg$key(r11, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r12 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0xffffffca, 0x80000000, 0x18, 0x1c, 0x11}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m19.288683031s ago: executing program 60 (id=2828): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r5, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r9, 'id1\x00'}) sendmsg$key(r11, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r12 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0xffffffca, 0x80000000, 0x18, 0x1c, 0x11}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m18.400535124s ago: executing program 0 (id=2838): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f0000000b40)={0x100, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff], 0x1}, 0x58) 6m18.332092689s ago: executing program 0 (id=2839): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b009284fa33545079938145c6a57a948b4400005fee13470f27", @ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES32, @ANYBLOB="0074ddcb213ca5000000000000000000354047842031b4a1"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r1, 0x409, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 6m18.063281551s ago: executing program 0 (id=2842): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="5100000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200ffffffb703000008000000b70400000000000085000000010000009500007e13587e11f82ae55443125b4419c6324375a6f8e750bb0aacb05cd44c5f4360006fb10cbcce53c13d40a6dddab185914733b6f8924ed04355d7c094d801834f43840ca6cd7eed9b1159e4b837e5589863d159995c6a8c0d9ebae4326f432a7f9ed2a786fed5443b57a34bddbbbf7183b6890b4938a7b7e2ff4123b867aab5d6e2f0c4fb5d5217e5c631"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 6m17.569187641s ago: executing program 0 (id=2847): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x8, 0x9, 0x1, 0x44, 0xffffffffffffffff}], &(0x7f0000000500)='GPL\x00', 0xc8, 0x1000, &(0x7f0000001600)=""/4096, 0x40f00, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000540)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x8, 0x1ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone3(&(0x7f0000000480)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6m17.472642659s ago: executing program 0 (id=2849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@delchain={0x2c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000040) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2000, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r10, @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r12 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {@empty, 0x1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x5}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 6m16.397240296s ago: executing program 0 (id=2858): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 6m16.397089696s ago: executing program 61 (id=2858): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) 5.282281732s ago: executing program 1 (id=9275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f00000010c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r1, 0x10, 0x160483b7, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000011c0)=@req3={0x81, 0x3, 0x3, 0x5, 0x7fff, 0x7, 0x3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r7, 'id1\x00'}) sendmsg$key(r9, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x40}, 0x18) 2.768702476s ago: executing program 5 (id=9297): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a07"], 0xfe33) r7 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.534882795s ago: executing program 4 (id=9298): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2.508841797s ago: executing program 4 (id=9299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000007000000060000008c00000000000000", @ANYRES32, @ANYBLOB="008ce0cdc74e5613f180bd910c9523e9358f539414e1f26d1111373a00"/38, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff7ffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='sched_switch\x00', r2}, 0xffffffffffffff6a) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x4040, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xffdd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 2.405084655s ago: executing program 1 (id=9301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="008800040000", 0x6, 0x0, 0x0, 0x2}]) 2.319918182s ago: executing program 1 (id=9302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) sendto(0xffffffffffffffff, &(0x7f00000001c0)="4821c5eaf3bb85c04b8c64f61f3d79c75f16db859c703b726946d0b0d24748c80cc4e6544859a4779a615dfe39819a5ca43a6c57c6688008b4f3705a50ca07f29a447bf54ff4c3", 0x47, 0x40, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 2.208047851s ago: executing program 1 (id=9303): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a07"], 0xfe33) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) 2.103104309s ago: executing program 4 (id=9306): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32=r3, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32, @ANYBLOB='\x00'/28]) waitid$P_PIDFD(0x3, r1, &(0x7f0000000840), 0x1, &(0x7f0000000500)) 1.990518139s ago: executing program 5 (id=9308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.828752541s ago: executing program 4 (id=9309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009000000", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x84) close_range(r1, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021100000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000408010100000000000000000000000a0600024000f500f6830003001100000063533b913bd626a2a57c8432cca48d08b03040b69eac63019078687b8980ae93bae5393f43406434683e727486b70b8e24e129dda52026b384d68243bf820604c35cf599c1b33ade06fc677650fcff55ac9c6d968127a95f44980ab081258abd56c8299249231f999d6ecc855679b7774b63d4e19826d4e221a36c3122927980c4413d02ac10a95f0cfdd981a65c25baaa2317240081c8fa9517c06e758ca64c"], 0x24}}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x7f, '\x00', 0x0, r1, 0x0, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x44, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001800000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a00000300000000000000000000001842000005000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000009ccef3eb0432e412000c1898190c000000b70508000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018270000", @ANYRES32=r1, @ANYBLOB="000000000400000018280000", @ANYRES32=r1, @ANYBLOB="0000000001010000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x21cdcd2f, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, @netfilter, r1, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x5, 0x3}, 0x10, 0x0, r3, 0x6, &(0x7f0000000cc0)=[r1, r1, r7, r1, r1, 0x1, r1], &(0x7f0000000d00)=[{0x0, 0x3, 0x8, 0x9}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x3, 0xc, 0xa}, {0x0, 0x5, 0x6, 0x1}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x3, 0x7}], 0x10, 0x9}, 0x94) epoll_create1(0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 1.807944993s ago: executing program 8 (id=9310): r0 = socket(0x1e, 0x4, 0x0) flock(r0, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v2={0x2000000, [{0xf, 0x1ff}, {0x5, 0x9}]}, 0x14, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000045090f2a00080000000200000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x379, &(0x7f0000002300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) 1.674901304s ago: executing program 2 (id=9312): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r7, 'id1\x00'}) sendmsg$key(r9, &(0x7f00000014c0)={0x300, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x40}, 0x18) 1.459369162s ago: executing program 1 (id=9313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) sendto(0xffffffffffffffff, &(0x7f00000001c0)="4821c5eaf3bb85c04b8c64f61f3d79c75f16db859c703b726946d0b0d24748c80cc4e6544859a4779a615dfe39819a5ca43a6c57c6688008b4f3705a50ca07f29a447bf54ff4c3", 0x47, 0x40, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 1.454386532s ago: executing program 62 (id=9313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) sendto(0xffffffffffffffff, &(0x7f00000001c0)="4821c5eaf3bb85c04b8c64f61f3d79c75f16db859c703b726946d0b0d24748c80cc4e6544859a4779a615dfe39819a5ca43a6c57c6688008b4f3705a50ca07f29a447bf54ff4c3", 0x47, 0x40, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 1.447706893s ago: executing program 5 (id=9315): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.408648766s ago: executing program 5 (id=9316): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802) 1.36031287s ago: executing program 5 (id=9317): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x763, 0x3e383) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xa454, 0x4000, 0x2, 0x1eb}, &(0x7f0000000100), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f00000004c0)=[{0x7, 0x3, 0x8, 0xefeb}, {0x1, 0xa, 0x8, 0x8}, {0x80, 0x7, 0x1, 0x20005}, {0x400, 0x7, 0x9, 0x8001}, {0x5d4, 0x3e, 0x1, 0x725}, {0x5, 0x1, 0x3, 0xfff}, {0xb9, 0x80, 0x8, 0x1}, {0x0, 0x9, 0x6d, 0x1}]}, 0x10) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='netfs_sreq_ref\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r8, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000000)={0x7fff, 0xd}) 853.990841ms ago: executing program 4 (id=9318): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a07"], 0xfe33) r7 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 801.041515ms ago: executing program 8 (id=9319): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@usrquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 687.930494ms ago: executing program 2 (id=9320): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32=r2, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32, @ANYBLOB='\x00'/28]) waitid$P_PIDFD(0x3, r1, &(0x7f0000000840), 0x1, &(0x7f0000000500)) 571.506954ms ago: executing program 2 (id=9321): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) brk(0x8000000000000001) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000050004008e07af5405000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000b21b637e79c92427335dce82488bb4b95fe32ef834345256b133596b0224cf017ade32149434811c698915a87236e3a91dbf3c0696dba88a51562005d999165b271a084ea0316d7c74318cd7cbb6c9edeaa190f7550fb8320d601e0845c224a0d180b67a7310fa74adf209114458f157a1f16cac54ec904ff5abf0038ddea40550a3f0cdb42f4c05128d0a3223514154d5e58e2104899e29996afbeed87b1477ae3596fb634bae97ff0592f830cd251765ed70ea91ea2a3e97d5fadf9195f2f2fc56b047680b7013ee4d8b", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf2501000000050004000100000005000400000000000500020002000000060001004e21000006000a004e230000050002000200000014000900fc0200"/82], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) sendfile(r5, r6, &(0x7f0000000100)=0x10, 0x10001) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000006c0)) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 521.371618ms ago: executing program 5 (id=9322): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x763, 0x3e383) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xa454, 0x4000, 0x2, 0x1eb}, &(0x7f0000000100), &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x9, &(0x7f00000004c0)=[{0x7, 0x3, 0x8, 0xefeb}, {0x1, 0xa, 0x8, 0x8}, {0x80, 0x7, 0x1, 0x20005}, {0x5, 0x0, 0x9, 0x1}, {0x400, 0x7, 0x9, 0x8001}, {0x5d4, 0x3e, 0x1, 0x725}, {0x5, 0x1, 0x3, 0xfff}, {0xb9, 0x80, 0x8, 0x1}, {0x0, 0x9, 0x6d, 0x1}]}, 0x10) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='netfs_sreq_ref\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r8, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000000)={0x7fff, 0xd}) 468.384672ms ago: executing program 8 (id=9323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 403.353577ms ago: executing program 8 (id=9324): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, 0x0, 0x0) 348.840562ms ago: executing program 8 (id=9325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@discard}]}, 0x1, 0x609, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="021300000200000000000000000000005274397444bac91ed587d3decfbc88658e0f128db10bec1c738dfd35f251456a4ffd89a877779e90ef7e2dcb73242afd2d15790f1da20c0b7d5124f4896b8d624590b00480e9df798c0a63339d7b5b275eaf51317f9d35afe70812065a0b4eb01b11dec75b08174af0e81afcd2d6d81d93ac69e184eab93fff474239691cb380277c12ec092c9230c5dcb324459b70162d689bbad7a6cb21cf074098a0b472079f789aa105ead4a94274f93d408795ffa24b29c1baa9dcf2a2e1cb96ed48"], 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 321.391224ms ago: executing program 2 (id=9326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 252.540969ms ago: executing program 2 (id=9327): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802) 216.892272ms ago: executing program 2 (id=9328): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009000000", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x84) close_range(r1, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021100000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000408010100000000000000000000000a0600024000f500f6830003001100000063533b913bd626a2a57c8432cca48d08b03040b69eac63019078687b8980ae93bae5393f43406434683e727486b70b8e24e129dda52026b384d68243bf820604c35cf599c1b33ade06fc677650fcff55ac9c6d968127a95f44980ab081258abd56c8299249231f999d6ecc855679b7774b63d4e19826d4e221a36c3122927980c4413d02ac10a95f0cfdd981a65c25baaa2317240081c8fa9517c06e758ca64c"], 0x24}}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x7f, '\x00', 0x0, r1, 0x0, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x44, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001800000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a00000300000000000000000000001842000005000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000009ccef3eb0432e412000c1898190c000000b70508000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018270000", @ANYRES32=r1, @ANYBLOB="000000000400000018280000", @ANYRES32=r1, @ANYBLOB="0000000001010000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x21cdcd2f, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, @netfilter, r1, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x5, 0x3}, 0x10, 0x0, r3, 0x6, &(0x7f0000000cc0)=[r1, r1, r7, r1, r1, 0x1, r1], &(0x7f0000000d00)=[{0x0, 0x3, 0x8, 0x9}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x3, 0xc, 0xa}, {0x0, 0x5, 0x6, 0x1}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x3, 0x7}], 0x10, 0x9}, 0x94) epoll_create1(0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 172.206996ms ago: executing program 4 (id=9329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32=r4, @ANYBLOB='\x00'/28]) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 0s ago: executing program 8 (id=9330): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) kernel console output (not intermixed with test programs): [ 561.936568][T31524] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.956732][T31524] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.9039: lblock 1 mapped to illegal pblock 1 (length 15) [ 561.972786][T31524] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 561.985201][T31524] EXT4-fs (loop2): This should not happen!! Data will be lost [ 561.985201][T31524] [ 562.002489][T31524] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 562.018873][T31527] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9039: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.033293][T31527] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9039: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.048752][T31527] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9039: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.063593][T31527] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9039: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.208751][T31531] loop8: detected capacity change from 0 to 1024 [ 562.251366][T31531] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.288488][T31531] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.9041: lblock 1 mapped to illegal pblock 1 (length 15) [ 562.317466][T31531] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 562.330008][T31531] EXT4-fs (loop8): This should not happen!! Data will be lost [ 562.330008][T31531] [ 562.351549][T31531] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 562.369689][T31543] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9041: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.385170][T31543] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9041: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.401061][T31543] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9041: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.415649][T31543] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9041: lblock 1 mapped to illegal pblock 1 (length 3) [ 562.440191][T31544] loop2: detected capacity change from 0 to 512 [ 562.478728][T31544] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 562.487153][T31547] loop8: detected capacity change from 0 to 1024 [ 562.501573][T31547] EXT4-fs: Ignoring removed bh option [ 562.507543][T31547] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 562.518636][T31547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 562.528783][T31547] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.9047: lblock 2 mapped to illegal pblock 2 (length 1) [ 562.543898][T31547] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9047: lblock 0 mapped to illegal pblock 48 (length 1) [ 562.558314][T31547] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.9047: Failed to acquire dquot type 0 [ 562.571323][T31547] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 562.571731][T31547] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.9047: mark_inode_dirty error [ 562.592750][T31547] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 562.614735][T31547] EXT4-fs (loop8): 1 orphan inode deleted [ 562.634631][ T2195] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 562.653903][ T2195] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 562.676423][T31547] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9047: lblock 0 mapped to illegal pblock 48 (length 1) [ 562.725278][T31557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.733783][T31557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.742077][T31557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9051'. [ 562.981779][T31572] loop8: detected capacity change from 0 to 128 [ 562.989854][T31572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 562.997698][T31572] FAT-fs (loop8): Filesystem has been set read-only [ 563.004323][T31572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 563.012184][T31572] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 563.168905][T31572] bio_check_eod: 122254 callbacks suppressed [ 563.168920][T31572] syz.8.9057: attempt to access beyond end of device [ 563.168920][T31572] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 563.169111][T31575] loop5: detected capacity change from 0 to 512 [ 563.175009][T31572] syz.8.9057: attempt to access beyond end of device [ 563.175009][T31572] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 563.188568][T31575] EXT4-fs: Ignoring removed oldalloc option [ 563.195837][T31572] syz.8.9057: attempt to access beyond end of device [ 563.195837][T31572] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 563.208645][T31575] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 563.214942][T31572] syz.8.9057: attempt to access beyond end of device [ 563.214942][T31572] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 563.231287][T31575] EXT4-fs (loop5): 1 truncate cleaned up [ 563.237929][T31572] syz.8.9057: attempt to access beyond end of device [ 563.237929][T31572] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 563.269085][T31572] syz.8.9057: attempt to access beyond end of device [ 563.269085][T31572] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 563.282556][T31572] syz.8.9057: attempt to access beyond end of device [ 563.282556][T31572] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 563.295857][T31572] syz.8.9057: attempt to access beyond end of device [ 563.295857][T31572] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 563.309198][T31572] syz.8.9057: attempt to access beyond end of device [ 563.309198][T31572] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 563.322587][T31572] syz.8.9057: attempt to access beyond end of device [ 563.322587][T31572] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 563.353495][T31580] loop4: detected capacity change from 0 to 512 [ 563.364441][T31580] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 563.490805][T31585] loop5: detected capacity change from 0 to 1024 [ 563.503916][T31586] loop4: detected capacity change from 0 to 128 [ 563.511084][T31585] EXT4-fs: Ignoring removed bh option [ 563.518405][T31585] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 563.530916][T31585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 563.531677][T31586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 563.547001][T31586] FAT-fs (loop4): Filesystem has been set read-only [ 563.549345][T31585] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.9061: lblock 2 mapped to illegal pblock 2 (length 1) [ 563.553993][T31586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 563.575479][T31586] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 563.580180][T31585] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.9061: lblock 0 mapped to illegal pblock 48 (length 1) [ 563.600372][T31585] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9061: Failed to acquire dquot type 0 [ 563.612456][T31585] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 563.623016][T31585] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.9061: mark_inode_dirty error [ 563.634613][T31585] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 563.646003][T31585] EXT4-fs (loop5): 1 orphan inode deleted [ 563.660854][ T41] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 563.690203][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 563.707579][T31585] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.9061: lblock 0 mapped to illegal pblock 48 (length 1) [ 563.794545][T31596] loop1: detected capacity change from 0 to 512 [ 563.808599][T31596] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.823718][T31596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 563.857952][T31596] EXT4-fs (loop1): 1 truncate cleaned up [ 563.899938][T31602] loop8: detected capacity change from 0 to 1024 [ 563.964374][T31602] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.029960][T31602] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.9067: lblock 1 mapped to illegal pblock 1 (length 15) [ 564.074526][T31602] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 564.086987][T31602] EXT4-fs (loop8): This should not happen!! Data will be lost [ 564.086987][T31602] [ 564.113195][T31612] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9067: lblock 1 mapped to illegal pblock 1 (length 3) [ 564.118989][T31602] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 564.357514][T31618] loop1: detected capacity change from 0 to 512 [ 564.364615][T31618] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 564.376611][T31618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 564.383158][T31618] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.9072: Block bitmap for bg 0 marked uninitialized [ 564.396509][T31618] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 564.406927][T31618] EXT4-fs (loop1): 1 orphan inode deleted [ 564.416696][T31618] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 564.426945][T31618] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 564.488340][T31623] loop1: detected capacity change from 0 to 512 [ 564.494921][T31623] EXT4-fs: Ignoring removed oldalloc option [ 564.501244][T31623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 564.512124][T31623] EXT4-fs (loop1): 1 truncate cleaned up [ 564.535976][T31626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.544455][T31626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.553127][T31626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9075'. [ 564.861413][T31641] loop2: detected capacity change from 0 to 512 [ 564.868027][T31641] EXT4-fs: Ignoring removed orlov option [ 564.874741][T31641] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 564.884110][T31641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 564.892389][T31641] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.9082: corrupted in-inode xattr: e_value size too large [ 564.907476][T31641] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.9082: couldn't read orphan inode 15 (err -117) [ 564.925966][T31641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9082'. [ 565.100210][T31645] netlink: 'syz.2.9082': attribute type 1 has an invalid length. [ 565.108027][T31645] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9082'. [ 565.117077][T31645] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 565.150819][T31647] loop8: detected capacity change from 0 to 512 [ 565.157907][T31647] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 565.168038][T31647] EXT4-fs (loop8): orphan cleanup on readonly fs [ 565.174562][T31647] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9083: Block bitmap for bg 0 marked uninitialized [ 565.188333][T31647] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 565.198776][T31647] EXT4-fs (loop8): 1 orphan inode deleted [ 565.207530][T31647] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 565.218518][T31647] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 565.254012][T31650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31650 comm=syz.4.9084 [ 565.285599][T31654] loop4: detected capacity change from 0 to 512 [ 565.292600][T31654] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 565.303048][T31654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 565.309669][T31654] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.9086: Block bitmap for bg 0 marked uninitialized [ 565.323334][T31654] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 565.332540][T31654] EXT4-fs (loop4): 1 orphan inode deleted [ 565.343850][T31654] EXT4-fs: Ignoring sb option on remount [ 565.349643][T31654] EXT4-fs: Ignoring removed orlov option [ 565.355404][T31654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.362053][T31654] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 565.369971][T31654] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 565.379462][T31654] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 565.724928][T31661] loop5: detected capacity change from 0 to 512 [ 565.737350][T31661] __quota_error: 198 callbacks suppressed [ 565.737366][T31661] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 565.753454][T31661] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 565.783358][T31661] netlink: 'syz.5.9089': attribute type 4 has an invalid length. [ 565.870280][T31669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.879309][T31669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.887827][T31669] __nla_validate_parse: 1 callbacks suppressed [ 565.887906][T31669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9092'. [ 566.251024][T31673] loop8: detected capacity change from 0 to 512 [ 566.258814][T31673] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 566.285039][T31673] EXT4-fs (loop8): 1 truncate cleaned up [ 566.632481][T31681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9096'. [ 566.658368][T31672] syz.8.9093 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 566.672536][T31672] CPU: 0 UID: 0 PID: 31672 Comm: syz.8.9093 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 566.672648][T31672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.672661][T31672] Call Trace: [ 566.672668][T31672] [ 566.672675][T31672] __dump_stack+0x1d/0x30 [ 566.672696][T31672] dump_stack_lvl+0xe8/0x140 [ 566.672728][T31672] dump_stack+0x15/0x1b [ 566.672756][T31672] dump_header+0x81/0x220 [ 566.672784][T31672] oom_kill_process+0x342/0x400 [ 566.672817][T31672] out_of_memory+0x979/0xb80 [ 566.672902][T31672] try_charge_memcg+0x5e6/0x9e0 [ 566.672933][T31672] obj_cgroup_charge_pages+0xa6/0x150 [ 566.672987][T31672] __memcg_kmem_charge_page+0x9f/0x170 [ 566.673019][T31672] __alloc_frozen_pages_noprof+0x188/0x360 [ 566.673055][T31672] alloc_pages_mpol+0xb3/0x250 [ 566.673137][T31672] alloc_pages_noprof+0x90/0x130 [ 566.673170][T31672] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 566.673277][T31672] __kvmalloc_node_noprof+0x30f/0x4e0 [ 566.673384][T31672] ? ip_set_alloc+0x1f/0x30 [ 566.673457][T31672] ? ip_set_alloc+0x1f/0x30 [ 566.673526][T31672] ? __kmalloc_cache_noprof+0x189/0x320 [ 566.673552][T31672] ip_set_alloc+0x1f/0x30 [ 566.673578][T31672] hash_netiface_create+0x282/0x740 [ 566.673612][T31672] ? __pfx_hash_netiface_create+0x10/0x10 [ 566.673664][T31672] ip_set_create+0x3c9/0x960 [ 566.673760][T31672] ? __nla_parse+0x40/0x60 [ 566.673787][T31672] nfnetlink_rcv_msg+0x4c6/0x590 [ 566.673884][T31672] netlink_rcv_skb+0x120/0x220 [ 566.673911][T31672] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 566.673941][T31672] nfnetlink_rcv+0x16b/0x1690 [ 566.674010][T31672] ? __list_del_entry_valid_or_report+0x65/0x130 [ 566.674078][T31672] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 566.674109][T31672] ? should_fail_ex+0x30/0x280 [ 566.674185][T31672] ? selinux_nlmsg_lookup+0x99/0x890 [ 566.674272][T31672] ? __rcu_read_unlock+0x34/0x70 [ 566.674293][T31672] ? __netlink_lookup+0x266/0x2a0 [ 566.674319][T31672] netlink_unicast+0x5c0/0x690 [ 566.674356][T31672] netlink_sendmsg+0x58b/0x6b0 [ 566.674378][T31672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.674455][T31672] __sock_sendmsg+0x145/0x180 [ 566.674485][T31672] ____sys_sendmsg+0x31e/0x4e0 [ 566.674505][T31672] ___sys_sendmsg+0x17b/0x1d0 [ 566.674538][T31672] __x64_sys_sendmsg+0xd4/0x160 [ 566.674668][T31672] x64_sys_call+0x191e/0x2ff0 [ 566.674772][T31672] do_syscall_64+0xd2/0x200 [ 566.674844][T31672] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 566.674871][T31672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.674917][T31672] RIP: 0033:0x7f7d9714ebe9 [ 566.674991][T31672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.675007][T31672] RSP: 002b:00007f7d95baf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.675027][T31672] RAX: ffffffffffffffda RBX: 00007f7d97375fa0 RCX: 00007f7d9714ebe9 [ 566.675041][T31672] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 566.675055][T31672] RBP: 00007f7d971d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 566.675069][T31672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.675083][T31672] R13: 00007f7d97376038 R14: 00007f7d97375fa0 R15: 00007ffe51ae6ea8 [ 566.675161][T31672] [ 566.675169][T31672] memory: usage 307200kB, limit 307200kB, failcnt 2529 [ 566.675182][T31672] memory+swap: usage 307796kB, limit 9007199254740988kB, failcnt 0 [ 566.675269][T31672] kmem: usage 307064kB, limit 9007199254740988kB, failcnt 0 [ 566.675282][T31672] Memory cgroup stats for /syz8: [ 566.688220][T31672] cache 24576 [ 566.688232][T31672] rss 0 [ 566.688239][T31672] shmem 0 [ 566.688246][T31672] mapped_file 0 [ 566.688254][T31672] dirty 0 [ 566.688306][T31672] writeback 0 [ 566.688312][T31672] workingset_refault_anon 841 [ 566.688319][T31672] workingset_refault_file 11 [ 566.688326][T31672] swap 610304 [ 566.688333][T31672] swapcached 0 [ 566.688341][T31672] pgpgin 265193 [ 566.688349][T31672] pgpgout 265159 [ 566.688356][T31672] pgfault 290858 [ 566.688362][T31672] pgmajfault 441 [ 566.688368][T31672] inactive_anon 0 [ 566.688374][T31672] active_anon 0 [ 566.688455][T31672] inactive_file 28672 [ 566.688461][T31672] active_file 0 [ 566.688467][T31672] unevictable 0 [ 566.688473][T31672] hierarchical_memory_limit 314572800 [ 566.688481][T31672] hierarchical_memsw_limit 9223372036854771712 [ 566.688488][T31672] total_cache 24576 [ 566.688495][T31672] total_rss 0 [ 566.688542][T31672] total_shmem 0 [ 566.688548][T31672] total_mapped_file 0 [ 566.688554][T31672] total_dirty 0 [ 566.688560][T31672] total_writeback 0 [ 566.688566][T31672] total_workingset_refault_anon 841 [ 566.688574][T31672] total_workingset_refault_file 11 [ 566.688583][T31672] total_swap 610304 [ 566.688591][T31672] total_swapcached 0 [ 566.688604][T31672] total_pgpgin 265193 [ 566.688611][T31672] total_pgpgout 265159 [ 566.688685][T31672] total_pgfault 290858 [ 566.688694][T31672] total_pgmajfault 441 [ 566.688701][T31672] total_inactive_anon 0 [ 566.688710][T31672] total_active_anon 0 [ 566.688717][T31672] total_inactive_file 28672 [ 566.688725][T31672] total_active_file 0 [ 566.688734][T31672] total_unevictable 0 [ 566.688741][T31672] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9093,pid=31671,uid=0 [ 566.688836][T31672] Memory cgroup out of memory: Killed process 31671 (syz.8.9093) total-vm:93896kB, anon-rss:1072kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 566.694164][T31681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31681 comm=syz.5.9096 [ 566.750208][T31684] loop5: detected capacity change from 0 to 1024 [ 566.762954][T31684] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.301815][T31684] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.9097: lblock 1 mapped to illegal pblock 1 (length 15) [ 567.316138][T31684] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 567.328776][T31684] EXT4-fs (loop5): This should not happen!! Data will be lost [ 567.328776][T31684] [ 567.340989][T31684] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 567.357682][T31684] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9097: lblock 1 mapped to illegal pblock 1 (length 3) [ 567.360486][T31689] loop8: detected capacity change from 0 to 512 [ 567.372056][T31684] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9097: lblock 1 mapped to illegal pblock 1 (length 3) [ 567.381141][T31689] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 567.394059][T31684] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9097: lblock 1 mapped to illegal pblock 1 (length 3) [ 567.403340][T31689] EXT4-fs (loop8): orphan cleanup on readonly fs [ 567.422548][T31689] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9098: Block bitmap for bg 0 marked uninitialized [ 567.436139][T31689] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 567.445314][T31689] EXT4-fs (loop8): 1 orphan inode deleted [ 567.461046][T31692] loop5: detected capacity change from 0 to 512 [ 567.468182][T31692] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 567.469894][T31689] EXT4-fs: Ignoring sb option on remount [ 567.479511][T31692] EXT4-fs (loop5): orphan cleanup on readonly fs [ 567.483444][T31689] EXT4-fs: Ignoring removed orlov option [ 567.490610][T31692] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.9099: Block bitmap for bg 0 marked uninitialized [ 567.496834][T31689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.509167][T31692] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 567.516229][T31689] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 567.525408][T31692] EXT4-fs (loop5): 1 orphan inode deleted [ 567.538521][T31689] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 567.548180][T31689] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 567.553703][T31692] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 567.566888][T31692] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 567.695990][T31697] loop5: detected capacity change from 0 to 512 [ 567.703889][T31697] EXT4-fs: Ignoring removed orlov option [ 567.710080][T31697] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 567.719238][T31697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 567.727448][T31697] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.9101: corrupted in-inode xattr: e_value size too large [ 567.741786][T31697] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.9101: couldn't read orphan inode 15 (err -117) [ 567.757932][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9101'. [ 567.856725][T31704] loop1: detected capacity change from 0 to 1024 [ 567.866279][T31704] EXT4-fs: Ignoring removed bh option [ 567.876278][T31704] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 567.889198][T31704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 567.898763][T31704] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.9103: lblock 2 mapped to illegal pblock 2 (length 1) [ 567.925698][T31708] C: renamed from team_slave_0 [ 567.933706][T31704] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 567.943520][T31708] netlink: 'syz.5.9101': attribute type 1 has an invalid length. [ 567.951518][T31708] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9101'. [ 567.960747][T31708] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 567.976982][T31704] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.9103: lblock 0 mapped to illegal pblock 48 (length 1) [ 567.992369][T31704] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 568.001296][T31704] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9103: Failed to acquire dquot type 0 [ 568.014465][T31704] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 568.024672][T31704] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.9103: mark_inode_dirty error [ 568.039229][T31704] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 568.050266][T31704] EXT4-fs (loop1): 1 orphan inode deleted [ 568.066279][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 568.089660][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 568.098160][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 568.113301][T31704] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.9103: lblock 0 mapped to illegal pblock 48 (length 1) [ 568.128595][T31704] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 568.203478][T31714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9107'. [ 568.226241][T31714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31714 comm=syz.1.9107 [ 568.256151][ T29] audit: type=1326 audit(1755285772.716:58153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31715 comm="syz.1.9108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a99bebe9 code=0x0 [ 568.323448][T31717] loop1: detected capacity change from 0 to 128 [ 568.331477][T31717] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 568.339394][T31717] FAT-fs (loop1): Filesystem has been set read-only [ 568.346094][T31717] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 568.353913][T31717] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 568.386834][T31717] buffer_io_error: 110042 callbacks suppressed [ 568.386851][T31717] Buffer I/O error on dev loop1, logical block 2065, async page read [ 568.401130][T31717] Buffer I/O error on dev loop1, logical block 2066, async page read [ 568.409211][T31717] Buffer I/O error on dev loop1, logical block 2067, async page read [ 568.417317][T31717] Buffer I/O error on dev loop1, logical block 2068, async page read [ 568.425414][T31717] Buffer I/O error on dev loop1, logical block 2069, async page read [ 568.433471][T31717] Buffer I/O error on dev loop1, logical block 2070, async page read [ 568.441553][T31717] Buffer I/O error on dev loop1, logical block 2071, async page read [ 568.449629][T31717] Buffer I/O error on dev loop1, logical block 2072, async page read [ 568.457742][T31717] Buffer I/O error on dev loop1, logical block 2065, async page read [ 568.465865][T31717] Buffer I/O error on dev loop1, logical block 2066, async page read [ 568.596869][T31717] bio_check_eod: 60438 callbacks suppressed [ 568.596943][T31717] syz.1.9108: attempt to access beyond end of device [ 568.596943][T31717] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 568.619208][T31722] loop8: detected capacity change from 0 to 512 [ 568.625964][T31717] syz.1.9108: attempt to access beyond end of device [ 568.625964][T31717] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 568.629770][T31724] loop5: detected capacity change from 0 to 512 [ 568.639511][T31722] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 568.651355][T31717] syz.1.9108: attempt to access beyond end of device [ 568.651355][T31717] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 568.661958][T31724] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 568.668633][T31717] syz.1.9108: attempt to access beyond end of device [ 568.668633][T31717] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 568.679564][T31722] EXT4-fs (loop8): orphan cleanup on readonly fs [ 568.691857][T31717] syz.1.9108: attempt to access beyond end of device [ 568.691857][T31717] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 568.698892][T31722] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9110: Block bitmap for bg 0 marked uninitialized [ 568.710960][T31717] syz.1.9108: attempt to access beyond end of device [ 568.710960][T31717] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 568.725788][T31724] EXT4-fs (loop5): orphan cleanup on readonly fs [ 568.737707][T31717] syz.1.9108: attempt to access beyond end of device [ 568.737707][T31717] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 568.745364][T31722] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 568.757743][T31717] syz.1.9108: attempt to access beyond end of device [ 568.757743][T31717] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 568.767285][T31724] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.9111: Block bitmap for bg 0 marked uninitialized [ 568.779286][T31717] syz.1.9108: attempt to access beyond end of device [ 568.779286][T31717] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 568.792857][T31722] EXT4-fs (loop8): 1 orphan inode deleted [ 568.805693][T31717] syz.1.9108: attempt to access beyond end of device [ 568.805693][T31717] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 568.811851][T31724] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 568.833563][T31724] EXT4-fs (loop5): 1 orphan inode deleted [ 568.841414][T31722] EXT4-fs: Ignoring sb option on remount [ 568.847128][T31722] EXT4-fs: Ignoring removed orlov option [ 568.856769][T31722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.869908][T31722] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 568.880778][T31724] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 568.890482][T31722] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 568.901596][T31724] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 568.910681][T31722] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 568.961334][T31728] loop4: detected capacity change from 0 to 512 [ 568.974471][T31728] EXT4-fs: Ignoring removed orlov option [ 568.981378][T31728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.988648][T31728] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 569.113544][T31740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9118'. [ 569.172192][T31740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31740 comm=syz.4.9118 [ 569.240432][T31752] loop1: detected capacity change from 0 to 512 [ 569.247867][T31752] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 569.259630][T31752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 569.266197][T31752] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.9124: Block bitmap for bg 0 marked uninitialized [ 569.280985][T31752] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 569.290074][T31752] EXT4-fs (loop1): 1 orphan inode deleted [ 569.295826][T31756] loop2: detected capacity change from 0 to 512 [ 569.296242][T31756] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 569.312744][T31756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 569.319165][T31752] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 569.319278][T31756] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.9125: Block bitmap for bg 0 marked uninitialized [ 569.330024][T31752] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 569.362489][T31756] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 569.375291][T31756] EXT4-fs (loop2): 1 orphan inode deleted [ 569.397473][T31756] EXT4-fs: Ignoring sb option on remount [ 569.401854][T31759] loop1: detected capacity change from 0 to 512 [ 569.403199][T31756] EXT4-fs: Ignoring removed orlov option [ 569.409814][T31759] EXT4-fs: Ignoring removed orlov option [ 569.415471][T31756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.427860][T31756] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 569.431832][T31759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.446578][T31756] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 569.448143][T31759] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 569.474247][T31756] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 569.548573][T31769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.557042][T31769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.565626][T31769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9130'. [ 569.685415][T31774] loop1: detected capacity change from 0 to 512 [ 569.702623][T31774] Quota error (device loop1): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 569.713072][T31774] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 569.730596][T31774] netlink: 'syz.1.9132': attribute type 4 has an invalid length. [ 569.796224][T31778] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9134'. [ 569.817092][ T29] audit: type=1326 audit(1755285774.156:58154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31779 comm="syz.1.9133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a99bebe9 code=0x0 [ 569.845675][T31778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31778 comm=syz.8.9134 [ 569.890621][T31783] loop1: detected capacity change from 0 to 128 [ 569.899178][T31783] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 569.907079][T31783] FAT-fs (loop1): Filesystem has been set read-only [ 569.913707][T31783] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 569.921837][T31783] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 570.036353][T31790] loop4: detected capacity change from 0 to 512 [ 570.043926][T31790] EXT4-fs: Ignoring removed orlov option [ 570.054630][T31790] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.068221][T31790] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 570.141934][T31794] loop5: detected capacity change from 0 to 512 [ 570.148947][T31794] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 570.159345][T31794] EXT4-fs (loop5): orphan cleanup on readonly fs [ 570.165855][T31794] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.9140: Block bitmap for bg 0 marked uninitialized [ 570.179252][T31794] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 570.188126][T31794] EXT4-fs (loop5): 1 orphan inode deleted [ 570.222545][T31794] EXT4-fs: Ignoring sb option on remount [ 570.228279][T31794] EXT4-fs: Ignoring removed orlov option [ 570.244998][T31794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.251782][T31794] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 570.270626][T31794] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 570.280499][T31794] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 570.320456][T31799] loop4: detected capacity change from 0 to 1024 [ 570.327191][T31799] EXT4-fs: Ignoring removed bh option [ 570.332952][T31799] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 570.344463][T31799] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 570.354855][T31799] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.9143: lblock 2 mapped to illegal pblock 2 (length 1) [ 570.369037][T31799] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 570.379564][T31799] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.9143: lblock 0 mapped to illegal pblock 48 (length 1) [ 570.393952][T31799] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 570.402788][T31799] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9143: Failed to acquire dquot type 0 [ 570.415628][T31799] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 570.425303][T31799] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.9143: mark_inode_dirty error [ 570.436938][T31799] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 570.447205][T31799] EXT4-fs (loop4): 1 orphan inode deleted [ 570.459499][ T41] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 570.474875][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 570.487683][T31799] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.9143: lblock 0 mapped to illegal pblock 48 (length 1) [ 570.696471][T31806] loop5: detected capacity change from 0 to 512 [ 570.703834][T31806] EXT4-fs: Ignoring removed mblk_io_submit option [ 570.712010][T31806] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 570.729333][T31806] EXT4-fs (loop5): 1 truncate cleaned up [ 570.753912][T31810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9146'. [ 570.818461][T31810] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31810 comm=syz.1.9146 [ 570.921078][T31821] loop8: detected capacity change from 0 to 512 [ 570.927716][T31821] EXT4-fs: Ignoring removed orlov option [ 570.933480][T31821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.940495][T31821] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 571.053992][T31830] loop8: detected capacity change from 0 to 1024 [ 571.060962][T31830] EXT4-fs: Ignoring removed bh option [ 571.066688][T31830] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 571.079018][T31830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 571.088135][T31830] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.9154: lblock 2 mapped to illegal pblock 2 (length 1) [ 571.103678][T31830] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9154: lblock 0 mapped to illegal pblock 48 (length 1) [ 571.118045][T31830] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.9154: Failed to acquire dquot type 0 [ 571.130518][T31830] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 571.140173][T31830] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.9154: mark_inode_dirty error [ 571.152754][T31830] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 571.163086][T31830] EXT4-fs (loop8): 1 orphan inode deleted [ 571.174951][ T51] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 571.189331][ T51] __quota_error: 4 callbacks suppressed [ 571.189344][ T51] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 571.203428][ T51] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 571.221056][T31830] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9154: lblock 0 mapped to illegal pblock 48 (length 1) [ 571.236698][T31830] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 571.321961][T31837] loop8: detected capacity change from 0 to 512 [ 571.339500][T31837] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 571.349912][T31837] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 571.377726][ T29] audit: type=1326 audit(1755285775.596:58155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31841 comm="syz.1.9157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a99bebe9 code=0x0 [ 571.407220][T31842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9158'. [ 571.409471][T31844] netlink: 'syz.8.9156': attribute type 4 has an invalid length. [ 571.445217][T31842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31842 comm=syz.4.9158 [ 571.461605][T31845] loop1: detected capacity change from 0 to 128 [ 571.472079][T31845] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 571.480003][T31845] FAT-fs (loop1): Filesystem has been set read-only [ 571.486847][T31845] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 571.490805][T31847] loop4: detected capacity change from 0 to 512 [ 571.494963][T31845] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 571.501545][T31847] EXT4-fs: Ignoring removed mblk_io_submit option [ 571.519985][T31847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 571.532417][T31847] EXT4-fs (loop4): 1 truncate cleaned up [ 571.802526][T31860] loop4: detected capacity change from 0 to 512 [ 571.810751][T31860] EXT4-fs: Ignoring removed orlov option [ 571.816577][T31860] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.823607][T31860] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 572.016923][T31866] loop5: detected capacity change from 0 to 512 [ 572.023669][T31866] EXT4-fs: Ignoring removed orlov option [ 572.029702][T31866] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 572.039737][T31866] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 572.048120][T31866] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.9166: corrupted in-inode xattr: e_value size too large [ 572.063501][T31866] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.9166: couldn't read orphan inode 15 (err -117) [ 572.084801][T31866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9166'. [ 572.205406][T31868] netlink: 'syz.5.9166': attribute type 1 has an invalid length. [ 572.213282][T31868] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9166'. [ 572.222347][T31868] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 572.468140][T31872] loop8: detected capacity change from 0 to 512 [ 572.476614][T31872] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 572.487803][T31872] EXT4-fs (loop8): orphan cleanup on readonly fs [ 572.494411][T31872] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9168: Block bitmap for bg 0 marked uninitialized [ 572.508114][T31872] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 572.517027][T31872] EXT4-fs (loop8): 1 orphan inode deleted [ 572.525732][T31872] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 572.535252][T31872] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 572.602378][T31877] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9170'. [ 572.627617][T31877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31877 comm=syz.8.9170 [ 572.711317][T31881] loop8: detected capacity change from 0 to 512 [ 572.723922][T31881] netlink: 'syz.8.9172': attribute type 4 has an invalid length. [ 572.788640][T31886] loop8: detected capacity change from 0 to 512 [ 572.796478][T31886] EXT4-fs: Ignoring removed mblk_io_submit option [ 572.804116][T31886] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 572.816419][T31886] EXT4-fs (loop8): 1 truncate cleaned up [ 572.841394][T31890] loop2: detected capacity change from 0 to 512 [ 572.848342][T31888] loop4: detected capacity change from 0 to 512 [ 572.866225][T31888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 572.877576][T31890] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 572.895566][T31890] EXT4-fs (loop2): orphan cleanup on readonly fs [ 572.898115][T31888] EXT4-fs (loop4): 1 truncate cleaned up [ 572.907946][T31890] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.9175: Block bitmap for bg 0 marked uninitialized [ 572.942021][T31890] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 572.951310][T31890] EXT4-fs (loop2): 1 orphan inode deleted [ 572.961947][T31890] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 572.997116][T31890] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 573.058911][ T29] audit: type=1326 audit(1755285777.147:58156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31898 comm="syz.2.9177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a2ceaebe9 code=0x0 [ 573.133388][T31902] loop2: detected capacity change from 0 to 128 [ 573.148713][T31902] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 573.156593][T31902] FAT-fs (loop2): Filesystem has been set read-only [ 573.165337][T31902] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 573.173286][T31902] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 573.186312][T31907] tmpfs: Unknown parameter '0x0000000000000006' [ 573.203917][T31907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.224142][T31907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.239106][T31907] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9180'. [ 573.326746][T31912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9182'. [ 573.405172][T31912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31912 comm=syz.1.9182 [ 573.536989][T31884] syz.4.9173 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 573.551296][T31884] CPU: 0 UID: 0 PID: 31884 Comm: syz.4.9173 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 573.551329][T31884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.551340][T31884] Call Trace: [ 573.551347][T31884] [ 573.551355][T31884] __dump_stack+0x1d/0x30 [ 573.551379][T31884] dump_stack_lvl+0xe8/0x140 [ 573.551454][T31884] dump_stack+0x15/0x1b [ 573.551469][T31884] dump_header+0x81/0x220 [ 573.551502][T31884] oom_kill_process+0x342/0x400 [ 573.551538][T31884] out_of_memory+0x979/0xb80 [ 573.551647][T31884] try_charge_memcg+0x5e6/0x9e0 [ 573.551679][T31884] obj_cgroup_charge_pages+0xa6/0x150 [ 573.551756][T31884] __memcg_kmem_charge_page+0x9f/0x170 [ 573.551848][T31884] __alloc_frozen_pages_noprof+0x188/0x360 [ 573.551879][T31884] alloc_pages_mpol+0xb3/0x250 [ 573.551908][T31884] alloc_pages_noprof+0x90/0x130 [ 573.552004][T31884] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 573.552102][T31884] __kvmalloc_node_noprof+0x30f/0x4e0 [ 573.552127][T31884] ? ip_set_alloc+0x1f/0x30 [ 573.552156][T31884] ? ip_set_alloc+0x1f/0x30 [ 573.552227][T31884] ? __kmalloc_cache_noprof+0x189/0x320 [ 573.552254][T31884] ip_set_alloc+0x1f/0x30 [ 573.552279][T31884] hash_netiface_create+0x282/0x740 [ 573.552373][T31884] ? __pfx_hash_netiface_create+0x10/0x10 [ 573.552406][T31884] ip_set_create+0x3c9/0x960 [ 573.552435][T31884] ? __nla_parse+0x40/0x60 [ 573.552456][T31884] nfnetlink_rcv_msg+0x4c6/0x590 [ 573.552497][T31884] netlink_rcv_skb+0x120/0x220 [ 573.552534][T31884] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 573.552613][T31884] nfnetlink_rcv+0x16b/0x1690 [ 573.552730][T31884] ? __list_del_entry_valid_or_report+0x65/0x130 [ 573.552832][T31884] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 573.552858][T31884] ? ___slab_alloc+0x11b/0x900 [ 573.552924][T31884] ? kmalloc_reserve+0x84/0x190 [ 573.552958][T31884] ? should_fail_ex+0x30/0x280 [ 573.552980][T31884] ? selinux_nlmsg_lookup+0x99/0x890 [ 573.553066][T31884] ? __rcu_read_unlock+0x34/0x70 [ 573.553089][T31884] ? __netlink_lookup+0x266/0x2a0 [ 573.553249][T31884] netlink_unicast+0x5c0/0x690 [ 573.553285][T31884] netlink_sendmsg+0x58b/0x6b0 [ 573.553307][T31884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.553374][T31884] __sock_sendmsg+0x145/0x180 [ 573.553397][T31884] ____sys_sendmsg+0x31e/0x4e0 [ 573.553453][T31884] ___sys_sendmsg+0x17b/0x1d0 [ 573.553489][T31884] __x64_sys_sendmsg+0xd4/0x160 [ 573.553514][T31884] x64_sys_call+0x191e/0x2ff0 [ 573.553532][T31884] do_syscall_64+0xd2/0x200 [ 573.553602][T31884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 573.553652][T31884] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 573.553758][T31884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.553781][T31884] RIP: 0033:0x7f6ffc57ebe9 [ 573.553798][T31884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.553815][T31884] RSP: 002b:00007f6ffafdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.553832][T31884] RAX: ffffffffffffffda RBX: 00007f6ffc7a5fa0 RCX: 00007f6ffc57ebe9 [ 573.553864][T31884] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 573.553875][T31884] RBP: 00007f6ffc601e19 R08: 0000000000000000 R09: 0000000000000000 [ 573.553888][T31884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.553902][T31884] R13: 00007f6ffc7a6038 R14: 00007f6ffc7a5fa0 R15: 00007ffcfb89a858 [ 573.553923][T31884] [ 573.553931][T31884] memory: usage 307200kB, limit 307200kB, failcnt 4700 [ 573.808115][T31902] buffer_io_error: 273983 callbacks suppressed [ 573.808130][T31902] Buffer I/O error on dev loop2, logical block 2066, async page read [ 573.813102][T31884] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 573.817589][T31902] Buffer I/O error on dev loop2, logical block 2067, async page read [ 573.837097][T31884] kmem: usage 307104kB, limit 9007199254740988kB, failcnt 0 [ 573.837113][T31884] Memory cgroup stats for /syz4: [ 573.837469][T31884] cache 4096 [ 573.861380][T31902] Buffer I/O error on dev loop2, logical block 2068, async page read [ 573.861507][T31884] rss 0 [ 573.861514][T31884] shmem 0 [ 573.861520][T31884] mapped_file 0 [ 573.861526][T31884] dirty 0 [ 573.861532][T31884] writeback 0 [ 573.861539][T31884] workingset_refault_anon 1682 [ 573.861548][T31884] workingset_refault_file 2453 [ 573.871261][T31902] Buffer I/O error on dev loop2, logical block 2069, async page read [ 573.877520][T31884] swap 479232 [ 573.877529][T31884] swapcached 0 [ 573.877536][T31884] pgpgin 421805 [ 573.877544][T31884] pgpgout 421781 [ 573.877551][T31884] pgfault 473124 [ 573.877559][T31884] pgmajfault 860 [ 573.886916][T31902] Buffer I/O error on dev loop2, logical block 2070, async page read [ 573.888573][T31884] inactive_anon 0 [ 573.888582][T31884] active_anon 0 [ 573.888590][T31884] inactive_file 0 [ 573.896684][T31902] Buffer I/O error on dev loop2, logical block 2071, async page read [ 573.901577][T31884] active_file 98304 [ 573.901586][T31884] unevictable 0 [ 573.901594][T31884] hierarchical_memory_limit 314572800 [ 573.910923][T31902] Buffer I/O error on dev loop2, logical block 2072, async page read [ 573.917563][T31884] hierarchical_memsw_limit 9223372036854771712 [ 573.917573][T31884] total_cache 4096 [ 573.917580][T31884] total_rss 0 [ 573.925872][T31902] Buffer I/O error on dev loop2, logical block 2065, async page read [ 573.932939][T31884] total_shmem 0 [ 573.932948][T31884] total_mapped_file 0 [ 573.932955][T31884] total_dirty 0 [ 573.932961][T31884] total_writeback 0 [ 573.932969][T31884] total_workingset_refault_anon 1682 [ 573.955841][T31902] Buffer I/O error on dev loop2, logical block 2066, async page read [ 573.958640][T31884] total_workingset_refault_file 2453 [ 573.958651][T31884] total_swap 479232 [ 573.958658][T31884] total_swapcached 0 [ 573.962813][T31902] Buffer I/O error on dev loop2, logical block 2067, async page read [ 573.964926][T31884] total_pgpgin 421805 [ 573.964936][T31884] total_pgpgout 421781 [ 573.964944][T31884] total_pgfault 473124 [ 574.023021][T31917] loop8: detected capacity change from 0 to 512 [ 574.030580][T31884] total_pgmajfault 860 [ 574.030637][T31884] total_inactive_anon 0 [ 574.063373][T31917] netlink: 'syz.8.9184': attribute type 4 has an invalid length. [ 574.064403][T31884] total_active_anon 0 [ 574.064413][T31884] total_inactive_file 0 [ 574.064420][T31884] total_active_file 98304 [ 574.064449][T31884] total_unevictable 0 [ 574.064456][T31884] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 574.084324][T31920] loop5: detected capacity change from 0 to 1024 [ 574.087429][T31884] ,cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9173,pid=31883,uid=0 [ 574.087500][T31884] Memory cgroup out of memory: Killed process 31883 (syz.4.9173) total-vm:93896kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 574.222293][T31922] loop2: detected capacity change from 0 to 512 [ 574.228772][T31922] EXT4-fs: Ignoring removed mblk_io_submit option [ 574.237174][T31922] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 574.249732][T31920] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.263424][T31922] EXT4-fs (loop2): 1 truncate cleaned up [ 574.309112][T31920] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.9186: lblock 1 mapped to illegal pblock 1 (length 15) [ 574.331711][T31920] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 574.344181][T31920] EXT4-fs (loop5): This should not happen!! Data will be lost [ 574.344181][T31920] [ 574.365028][T31928] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9186: lblock 1 mapped to illegal pblock 1 (length 3) [ 574.383188][T31920] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 574.399295][T31928] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 1: comm syz.5.9186: lblock 1 mapped to illegal pblock 1 (length 3) [ 574.442261][ T29] audit: type=1326 audit(1755285778.402:58157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31929 comm="syz.8.9187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d9714ebe9 code=0x0 [ 574.503068][T31939] loop5: detected capacity change from 0 to 512 [ 574.510852][T31937] loop8: detected capacity change from 0 to 128 [ 574.519242][T31939] EXT4-fs: Ignoring removed orlov option [ 574.525905][T31939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.534320][T31937] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 574.542200][T31937] FAT-fs (loop8): Filesystem has been set read-only [ 574.552299][T31939] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 574.559045][T31941] loop4: detected capacity change from 0 to 512 [ 574.559213][T31937] bio_check_eod: 259338 callbacks suppressed [ 574.559225][T31937] syz.8.9187: attempt to access beyond end of device [ 574.559225][T31937] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 574.586248][T31937] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 574.594154][T31937] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 574.603163][T31942] syz.8.9187: attempt to access beyond end of device [ 574.603163][T31942] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 574.619283][T31941] EXT4-fs: Ignoring removed mblk_io_submit option [ 574.626223][T31942] syz.8.9187: attempt to access beyond end of device [ 574.626223][T31942] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 574.639997][T31941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 574.650003][T31942] syz.8.9187: attempt to access beyond end of device [ 574.650003][T31942] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 574.663359][T31942] syz.8.9187: attempt to access beyond end of device [ 574.663359][T31942] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 574.678332][T31941] EXT4-fs (loop4): 1 truncate cleaned up [ 574.689510][T31942] syz.8.9187: attempt to access beyond end of device [ 574.689510][T31942] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 574.714794][T31942] syz.8.9187: attempt to access beyond end of device [ 574.714794][T31942] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 574.730664][T31942] syz.8.9187: attempt to access beyond end of device [ 574.730664][T31942] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 574.750605][T31942] syz.8.9187: attempt to access beyond end of device [ 574.750605][T31942] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 574.764750][T31937] syz.8.9187: attempt to access beyond end of device [ 574.764750][T31937] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 574.799284][T31952] tmpfs: Unknown parameter '0x0000000000000006' [ 574.820540][T31952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.855432][T31952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.893184][ T29] audit: type=1326 audit(1755285778.845:58158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31955 comm="syz.5.9196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f006e06ebe9 code=0x0 [ 574.895965][T31952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9194'. [ 575.003145][T31957] loop5: detected capacity change from 0 to 128 [ 575.022309][T31957] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 575.030194][T31957] FAT-fs (loop5): Filesystem has been set read-only [ 575.037947][T31957] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 575.045808][T31957] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 575.319268][T31965] loop2: detected capacity change from 0 to 512 [ 575.342896][T31965] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 575.379607][T31965] EXT4-fs (loop2): 1 truncate cleaned up [ 575.439356][T31972] loop8: detected capacity change from 0 to 1024 [ 575.467779][T31972] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.512631][T31972] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.9202: lblock 1 mapped to illegal pblock 1 (length 15) [ 575.553673][T31972] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 575.566212][T31972] EXT4-fs (loop8): This should not happen!! Data will be lost [ 575.566212][T31972] [ 575.611109][T31976] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9202: lblock 1 mapped to illegal pblock 1 (length 3) [ 575.630109][T31972] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 575.652906][T31976] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9202: lblock 1 mapped to illegal pblock 1 (length 3) [ 575.681692][T31976] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9202: lblock 1 mapped to illegal pblock 1 (length 3) [ 575.710728][T31981] loop1: detected capacity change from 0 to 512 [ 575.730683][T31981] EXT4-fs: Ignoring removed orlov option [ 575.742202][T31981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.759095][T31981] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 575.824819][T31987] loop1: detected capacity change from 0 to 512 [ 575.837377][T31987] EXT4-fs: Ignoring removed mblk_io_submit option [ 575.852637][T31987] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 575.865518][T31991] loop5: detected capacity change from 0 to 512 [ 575.872440][T31991] EXT4-fs: Ignoring removed mblk_io_submit option [ 575.879453][T31987] EXT4-fs (loop1): 1 truncate cleaned up [ 575.882705][T31994] loop8: detected capacity change from 0 to 512 [ 575.891651][T31991] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 575.902269][T31994] EXT4-fs: Ignoring removed mblk_io_submit option [ 575.909308][T31994] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 575.920513][T31991] EXT4-fs (loop5): 1 truncate cleaned up [ 575.931309][T31994] EXT4-fs (loop8): 1 truncate cleaned up [ 576.313530][ T29] audit: type=1326 audit(1755285780.156:58159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32005 comm="syz.4.9211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ffc57ebe9 code=0x0 [ 576.407008][T32007] loop4: detected capacity change from 0 to 128 [ 576.429466][T32013] syzkaller0: entered promiscuous mode [ 576.435073][T32013] syzkaller0: entered allmulticast mode [ 576.444770][T32007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 576.452784][T32007] FAT-fs (loop4): Filesystem has been set read-only [ 576.461897][T32007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 576.469812][T32007] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 576.651279][T32018] loop2: detected capacity change from 0 to 1024 [ 576.684912][T32018] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.722094][T32018] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.9216: lblock 1 mapped to illegal pblock 1 (length 15) [ 576.737351][T32018] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 576.749777][T32018] EXT4-fs (loop2): This should not happen!! Data will be lost [ 576.749777][T32018] [ 576.762784][T32024] loop1: detected capacity change from 0 to 512 [ 576.770538][T32018] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 576.777717][T32024] EXT4-fs: Ignoring removed orlov option [ 576.801085][T32018] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9216: lblock 1 mapped to illegal pblock 1 (length 3) [ 576.818918][T32024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.825671][T32018] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9216: lblock 1 mapped to illegal pblock 1 (length 3) [ 576.841196][T32024] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 576.854253][T32018] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9216: lblock 1 mapped to illegal pblock 1 (length 3) [ 576.874266][T32018] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.9216: lblock 1 mapped to illegal pblock 1 (length 3) [ 576.899884][ T29] audit: type=1326 audit(1755285780.700:58160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32028 comm="syz.1.9220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a99bebe9 code=0x0 [ 576.991224][T32032] loop1: detected capacity change from 0 to 128 [ 577.000498][T32032] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 577.008392][T32032] FAT-fs (loop1): Filesystem has been set read-only [ 577.020423][T32032] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 577.028356][T32032] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 577.039544][T32035] loop2: detected capacity change from 0 to 512 [ 577.046197][T32035] EXT4-fs: Ignoring removed mblk_io_submit option [ 577.053368][T32035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.086724][T32035] EXT4-fs (loop2): 1 truncate cleaned up [ 577.314700][T32048] loop8: detected capacity change from 0 to 1024 [ 577.343405][T32048] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.355335][T32052] loop4: detected capacity change from 0 to 512 [ 577.379769][T32052] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 577.382858][T32048] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.9226: lblock 1 mapped to illegal pblock 1 (length 15) [ 577.417661][T32052] EXT4-fs (loop4): 1 truncate cleaned up [ 577.433712][T32048] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 577.441037][T32053] syzkaller0: entered promiscuous mode [ 577.446192][T32048] EXT4-fs (loop8): This should not happen!! Data will be lost [ 577.446192][T32048] [ 577.451671][T32053] syzkaller0: entered allmulticast mode [ 577.500803][T32055] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9226: lblock 1 mapped to illegal pblock 1 (length 3) [ 577.528964][T32048] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 577.556661][T32055] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9226: lblock 1 mapped to illegal pblock 1 (length 3) [ 577.594942][T32047] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9226: lblock 1 mapped to illegal pblock 1 (length 3) [ 577.691080][T32063] loop5: detected capacity change from 0 to 512 [ 577.706762][T32063] EXT4-fs: Ignoring removed orlov option [ 577.730341][T32063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.752082][T32063] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 577.833809][T32069] netlink: 'syz.5.9234': attribute type 4 has an invalid length. [ 577.868566][ T29] audit: type=1326 audit(1755285781.587:58161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32074 comm="syz.1.9236" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4a99bebe9 code=0x0 [ 577.958351][T32080] loop2: detected capacity change from 0 to 512 [ 577.979053][T32078] loop1: detected capacity change from 0 to 128 [ 577.987781][T32082] loop5: detected capacity change from 0 to 512 [ 577.994581][T32080] EXT4-fs: Ignoring removed orlov option [ 578.002617][T32080] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 578.011426][T32082] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 578.020973][T32084] loop8: detected capacity change from 0 to 1024 [ 578.029555][T32078] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 578.036104][T32084] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.037443][T32078] FAT-fs (loop1): Filesystem has been set read-only [ 578.037703][T32078] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 578.062469][T32078] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 578.072481][T32080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 578.081106][T32080] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.9238: corrupted in-inode xattr: e_value size too large [ 578.081705][T32084] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 15) [ 578.096579][T32082] EXT4-fs (loop5): orphan cleanup on readonly fs [ 578.119230][T32082] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.9239: Block bitmap for bg 0 marked uninitialized [ 578.133938][T32080] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.9238: couldn't read orphan inode 15 (err -117) [ 578.146736][T32084] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 578.159187][T32084] EXT4-fs (loop8): This should not happen!! Data will be lost [ 578.159187][T32084] [ 578.165887][T32082] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 578.197048][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.205756][T32046] syz.4.9225 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 578.225282][T32046] CPU: 1 UID: 0 PID: 32046 Comm: syz.4.9225 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 578.225313][T32046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.225325][T32046] Call Trace: [ 578.225331][T32046] [ 578.225339][T32046] __dump_stack+0x1d/0x30 [ 578.225394][T32046] dump_stack_lvl+0xe8/0x140 [ 578.225414][T32046] dump_stack+0x15/0x1b [ 578.225432][T32046] dump_header+0x81/0x220 [ 578.225535][T32046] oom_kill_process+0x342/0x400 [ 578.225570][T32046] out_of_memory+0x979/0xb80 [ 578.225601][T32046] try_charge_memcg+0x5e6/0x9e0 [ 578.225630][T32046] obj_cgroup_charge_pages+0xa6/0x150 [ 578.225691][T32046] __memcg_kmem_charge_page+0x9f/0x170 [ 578.225725][T32046] __alloc_frozen_pages_noprof+0x188/0x360 [ 578.225763][T32046] alloc_pages_mpol+0xb3/0x250 [ 578.225796][T32046] alloc_pages_noprof+0x90/0x130 [ 578.225847][T32046] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 578.225882][T32046] __kvmalloc_node_noprof+0x30f/0x4e0 [ 578.225959][T32046] ? ip_set_alloc+0x1f/0x30 [ 578.225987][T32046] ? ip_set_alloc+0x1f/0x30 [ 578.226015][T32046] ? __kmalloc_cache_noprof+0x189/0x320 [ 578.226093][T32046] ip_set_alloc+0x1f/0x30 [ 578.226132][T32046] hash_netiface_create+0x282/0x740 [ 578.226247][T32046] ? __pfx_hash_netiface_create+0x10/0x10 [ 578.226286][T32046] ip_set_create+0x3c9/0x960 [ 578.226321][T32046] ? __nla_parse+0x40/0x60 [ 578.226345][T32046] nfnetlink_rcv_msg+0x4c6/0x590 [ 578.226517][T32046] netlink_rcv_skb+0x120/0x220 [ 578.226536][T32046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 578.226573][T32046] nfnetlink_rcv+0x16b/0x1690 [ 578.226612][T32046] ? __list_del_entry_valid_or_report+0x65/0x130 [ 578.226699][T32046] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 578.226795][T32046] ? should_fail_ex+0x30/0x280 [ 578.226814][T32046] ? selinux_nlmsg_lookup+0x99/0x890 [ 578.226841][T32046] ? __rcu_read_unlock+0x34/0x70 [ 578.226886][T32046] ? __netlink_lookup+0x266/0x2a0 [ 578.226908][T32046] netlink_unicast+0x5c0/0x690 [ 578.226939][T32046] netlink_sendmsg+0x58b/0x6b0 [ 578.226962][T32046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.227060][T32046] __sock_sendmsg+0x145/0x180 [ 578.227125][T32046] ____sys_sendmsg+0x31e/0x4e0 [ 578.227147][T32046] ___sys_sendmsg+0x17b/0x1d0 [ 578.227249][T32046] __x64_sys_sendmsg+0xd4/0x160 [ 578.227271][T32046] x64_sys_call+0x191e/0x2ff0 [ 578.227290][T32046] do_syscall_64+0xd2/0x200 [ 578.227313][T32046] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 578.227377][T32046] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 578.227399][T32046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.227484][T32046] RIP: 0033:0x7f6ffc57ebe9 [ 578.227501][T32046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.227520][T32046] RSP: 002b:00007f6ffafdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.227538][T32046] RAX: ffffffffffffffda RBX: 00007f6ffc7a5fa0 RCX: 00007f6ffc57ebe9 [ 578.227570][T32046] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 578.227584][T32046] RBP: 00007f6ffc601e19 R08: 0000000000000000 R09: 0000000000000000 [ 578.227598][T32046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.227613][T32046] R13: 00007f6ffc7a6038 R14: 00007f6ffc7a5fa0 R15: 00007ffcfb89a858 [ 578.227673][T32046] [ 578.227754][T32046] memory: usage 307200kB, limit 307200kB, failcnt 5124 [ 578.262603][T32082] EXT4-fs (loop5): 1 orphan inode deleted [ 578.265488][T32046] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 578.269733][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.273937][T32046] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 578.274029][T32046] Memory cgroup stats for [ 578.280690][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.283388][T32046] /syz4 [ 578.289503][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9238'. [ 578.293696][T32046] : [ 578.294343][T32046] cache 4096 [ 578.300729][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.305020][T32046] rss 0 [ 578.305030][T32046] shmem 0 [ 578.305037][T32046] mapped_file 0 [ 578.337741][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.340727][T32046] dirty 0 [ 578.358822][T32083] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.360583][T32046] writeback 0 [ 578.365145][T32083] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.369803][T32046] workingset_refault_anon 1758 [ 578.369814][T32046] workingset_refault_file 2453 [ 578.369822][T32046] swap 475136 [ 578.369829][T32046] swapcached 4096 [ 578.369838][T32046] pgpgin 424009 [ 578.369845][T32046] pgpgout 423984 [ 578.369852][T32046] pgfault 475075 [ 578.394882][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.396169][T32046] pgmajfault 898 [ 578.396177][T32046] inactive_anon 0 [ 578.396184][T32046] active_anon 0 [ 578.396190][T32046] inactive_file 0 [ 578.396196][T32046] active_file 98304 [ 578.396203][T32046] unevictable 0 [ 578.396209][T32046] hierarchical_memory_limit 314572800 [ 578.412852][T32090] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 1: comm syz.8.9240: lblock 1 mapped to illegal pblock 1 (length 3) [ 578.416220][T32046] hierarchical_memsw_limit 9223372036854771712 [ 578.426016][T32082] EXT4-fs: Ignoring sb option on remount [ 578.430948][T32046] total_cache 4096 [ 578.435670][T32082] EXT4-fs: Ignoring removed orlov option [ 578.440368][T32046] total_rss 0 [ 578.470939][T32082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.476722][T32046] total_shmem 0 [ 578.476734][T32046] total_mapped_file 0 [ 578.476741][T32046] total_dirty 0 [ 578.492261][T32082] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 578.500824][T32046] total_writeback 0 [ 578.500836][T32046] total_workingset_refault_anon 1758 [ 578.520537][T32095] netlink: 'syz.2.9238': attribute type 1 has an invalid length. [ 578.525264][T32046] total_workingset_refault_file 2453 [ 578.533403][T32095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9238'. [ 578.541347][T32046] total_swap 475136 [ 578.549337][T32095] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 578.889028][T32046] total_swapcached 4096 [ 578.893304][T32046] total_pgpgin 424009 [ 578.897354][T32046] total_pgpgout 423984 [ 578.901546][T32046] total_pgfault 475075 [ 578.905616][T32046] total_pgmajfault 898 [ 578.909742][T32046] total_inactive_anon 0 [ 578.913924][T32046] total_active_anon 0 [ 578.917900][T32046] total_inactive_file 0 [ 578.922180][T32046] total_active_file 98304 [ 578.926603][T32046] total_unevictable 0 [ 578.930561][T32046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.9225,pid=32045,uid=0 [ 578.945203][T32046] Memory cgroup out of memory: Killed process 32045 (syz.4.9225) total-vm:93896kB, anon-rss:944kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 578.962432][T32082] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 578.976779][T22231] EXT4-fs unmount: 165 callbacks suppressed [ 578.976795][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.995194][T32082] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 579.026637][T32097] syzkaller0: entered promiscuous mode [ 579.032161][T32097] syzkaller0: entered allmulticast mode [ 579.042592][T31237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.059262][T32101] tmpfs: Unknown parameter '0x0000000000000006' [ 579.067183][T32101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.075762][T32101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.084125][T32101] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9243'. [ 579.108677][T30643] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.118457][T28889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.221117][T32107] loop4: detected capacity change from 0 to 512 [ 579.227688][T32107] EXT4-fs: Ignoring removed orlov option [ 579.233345][T32107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.240288][T32107] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 579.262302][ T29] audit: type=1326 audit(1755285782.879:58162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32108 comm="syz.4.9247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ffc57ebe9 code=0x0 [ 579.333899][ T29] audit: type=1326 audit(1755285782.934:58163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32117 comm="syz.2.9251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a2ceaebe9 code=0x0 [ 579.357142][T32116] loop4: detected capacity change from 0 to 128 [ 579.365318][T32116] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 579.373187][T32116] FAT-fs (loop4): Filesystem has been set read-only [ 579.380015][T32116] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 579.388015][T32116] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 579.403945][T32119] loop2: detected capacity change from 0 to 128 [ 579.413786][T32119] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 579.421686][T32119] FAT-fs (loop2): Filesystem has been set read-only [ 579.429051][T32119] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 579.437092][T32119] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 579.447366][T32120] buffer_io_error: 118453 callbacks suppressed [ 579.447462][T32120] Buffer I/O error on dev loop4, logical block 2065, async page read [ 579.462378][T32120] Buffer I/O error on dev loop4, logical block 2066, async page read [ 579.468999][T32123] Buffer I/O error on dev loop2, logical block 2065, async page read [ 579.470684][T32120] Buffer I/O error on dev loop4, logical block 2067, async page read [ 579.479873][T32123] Buffer I/O error on dev loop2, logical block 2066, async page read [ 579.487273][T32120] Buffer I/O error on dev loop4, logical block 2068, async page read [ 579.495002][T32123] Buffer I/O error on dev loop2, logical block 2067, async page read [ 579.511418][T32120] Buffer I/O error on dev loop4, logical block 2069, async page read [ 579.514796][T32123] Buffer I/O error on dev loop2, logical block 2068, async page read [ 579.520017][T32120] Buffer I/O error on dev loop4, logical block 2070, async page read [ 579.650254][T32125] loop1: detected capacity change from 0 to 512 [ 579.656911][T32125] EXT4-fs: Ignoring removed mblk_io_submit option [ 579.685421][T32125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 579.705923][T32125] EXT4-fs (loop1): 1 truncate cleaned up [ 579.718856][T32125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.774800][T32129] loop5: detected capacity change from 0 to 512 [ 579.828971][T32129] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 579.845666][T32133] loop8: detected capacity change from 0 to 512 [ 579.886703][T32129] EXT4-fs (loop5): 1 truncate cleaned up [ 579.892728][T32129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.906443][T32133] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 579.953223][T32133] EXT4-fs (loop8): orphan cleanup on readonly fs [ 579.974654][T32133] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9255: Block bitmap for bg 0 marked uninitialized [ 579.989302][T32119] bio_check_eod: 142411 callbacks suppressed [ 579.989318][T32119] syz.2.9251: attempt to access beyond end of device [ 579.989318][T32119] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 580.009600][T32119] syz.2.9251: attempt to access beyond end of device [ 580.009600][T32119] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 580.016565][T32133] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 580.023638][T32119] syz.2.9251: attempt to access beyond end of device [ 580.023638][T32119] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 580.038424][T32116] syz.4.9247: attempt to access beyond end of device [ 580.038424][T32116] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 580.045535][T32119] syz.2.9251: attempt to access beyond end of device [ 580.045535][T32119] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 580.064387][T32116] syz.4.9247: attempt to access beyond end of device [ 580.064387][T32116] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 580.085157][T32133] EXT4-fs (loop8): 1 orphan inode deleted [ 580.091212][T32133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 580.108725][T32119] syz.2.9251: attempt to access beyond end of device [ 580.108725][T32119] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 580.134335][T32116] syz.4.9247: attempt to access beyond end of device [ 580.134335][T32116] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 580.150203][T32119] syz.2.9251: attempt to access beyond end of device [ 580.150203][T32119] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 580.176237][T32119] syz.2.9251: attempt to access beyond end of device [ 580.176237][T32119] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 580.208240][T32133] EXT4-fs: Ignoring sb option on remount [ 580.214022][T32133] EXT4-fs: Ignoring removed orlov option [ 580.229440][T32133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.248979][T32138] loop4: detected capacity change from 0 to 1024 [ 580.254645][T32133] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 580.265849][T32138] EXT4-fs: Ignoring removed bh option [ 580.276479][T32133] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 580.288509][T32138] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 580.299035][T32133] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 580.309365][T32138] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 580.319368][T32138] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.9256: lblock 2 mapped to illegal pblock 2 (length 1) [ 580.349229][T32138] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 580.365269][T32138] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.9256: lblock 0 mapped to illegal pblock 48 (length 1) [ 580.395989][T32138] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 580.404792][T32138] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9256: Failed to acquire dquot type 0 [ 580.420368][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.438201][T32138] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 580.454652][T29085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.475157][T32138] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.9256: mark_inode_dirty error [ 580.490047][T32143] loop8: detected capacity change from 0 to 512 [ 580.500875][T32138] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 580.507850][T32143] EXT4-fs: Ignoring removed orlov option [ 580.525531][T32143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.527880][T32138] EXT4-fs (loop4): 1 orphan inode deleted [ 580.544395][T32143] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 580.544755][T32138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.563904][ T41] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 580.582508][ T41] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 580.591174][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 580.625600][T32151] loop8: detected capacity change from 0 to 512 [ 580.641099][T32151] EXT4-fs: Ignoring removed oldalloc option [ 580.641224][T32138] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.9256: lblock 0 mapped to illegal pblock 48 (length 1) [ 580.662410][T32138] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 580.666668][T32151] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 580.706872][T31237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.707910][T32155] tmpfs: Unknown parameter '0x0000000000000006' [ 580.716726][T32151] EXT4-fs (loop8): 1 truncate cleaned up [ 580.729732][T32151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.742653][T28889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.752316][T32155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.761201][T32155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.770048][T32155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9264'. [ 580.783326][T32158] loop2: detected capacity change from 0 to 512 [ 580.789877][T32158] EXT4-fs: Ignoring removed mblk_io_submit option [ 580.797776][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.806922][T32158] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 580.822089][T32161] tmpfs: Unknown parameter '0x0000000000000006' [ 580.826492][T32165] loop8: detected capacity change from 0 to 512 [ 580.834770][T32158] EXT4-fs (loop2): 1 truncate cleaned up [ 580.841008][T32158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.842362][T32161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.854276][T32165] EXT4-fs: Ignoring removed mblk_io_submit option [ 580.869232][T32165] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 580.879564][T32161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.891145][T32161] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9265'. [ 580.901972][T32165] EXT4-fs (loop8): 1 truncate cleaned up [ 580.929928][T32165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.986143][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.003308][T32170] loop8: detected capacity change from 0 to 512 [ 581.010448][T32170] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 581.031090][T32170] EXT4-fs (loop8): orphan cleanup on readonly fs [ 581.048702][T32170] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9269: Block bitmap for bg 0 marked uninitialized [ 581.062155][T32170] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 581.071719][T32170] EXT4-fs (loop8): 1 orphan inode deleted [ 581.077823][T32170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 581.106852][T32170] EXT4-fs: Ignoring sb option on remount [ 581.112596][T32170] EXT4-fs: Ignoring removed orlov option [ 581.118527][T32170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 581.125212][T32170] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 581.133220][T32170] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 581.142954][T32170] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 581.182367][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.219787][T32177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9270'. [ 581.283602][T32177] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32177 comm=syz.8.9270 [ 581.383931][T32183] loop8: detected capacity change from 0 to 512 [ 581.393555][T32183] EXT4-fs: Ignoring removed orlov option [ 581.399383][T32183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 581.409124][T32183] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 581.462261][T32185] loop8: detected capacity change from 0 to 512 [ 581.496816][T32185] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 581.534751][T32185] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 581.538355][T32192] loop1: detected capacity change from 0 to 512 [ 581.546425][T32185] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 581.609237][T32185] netlink: 'syz.8.9274': attribute type 4 has an invalid length. [ 581.620000][T32192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 581.667802][T32192] EXT4-fs (loop1): 1 truncate cleaned up [ 581.689063][T30643] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.701248][T32192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.714317][T22231] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 581.751939][T32200] loop8: detected capacity change from 0 to 512 [ 581.758614][T32200] EXT4-fs: Ignoring removed mblk_io_submit option [ 581.769734][T32198] loop2: detected capacity change from 0 to 512 [ 581.785008][T32200] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 581.807226][T32198] EXT4-fs: Ignoring removed oldalloc option [ 581.814898][T32200] EXT4-fs (loop8): 1 truncate cleaned up [ 581.824445][T32198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 581.836168][T32200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.859349][T32198] EXT4-fs (loop2): 1 truncate cleaned up [ 581.870947][T32204] loop4: detected capacity change from 0 to 1024 [ 581.878876][T32198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.904472][T32204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.918586][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.927586][T32204] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.947721][T32204] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.9280: lblock 1 mapped to illegal pblock 1 (length 15) [ 581.965261][T30643] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.979177][T32204] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 581.991610][T32204] EXT4-fs (loop4): This should not happen!! Data will be lost [ 581.991610][T32204] [ 582.002562][T32212] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.9280: lblock 1 mapped to illegal pblock 1 (length 3) [ 582.017699][T32212] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.9280: lblock 1 mapped to illegal pblock 1 (length 3) [ 582.018648][T32209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9282'. [ 582.031962][T32204] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 582.088673][T32215] tmpfs: Unknown parameter '0x0000000000000006' [ 582.097765][T32215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.106313][T32215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.114764][T28889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.114837][T32215] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9283'. [ 582.191508][T32213] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32213 comm=syz.2.9282 [ 582.307965][T32187] syz.1.9275 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 582.322183][T32187] CPU: 0 UID: 0 PID: 32187 Comm: syz.1.9275 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 582.322225][T32187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.322236][T32187] Call Trace: [ 582.322244][T32187] [ 582.322328][T32187] __dump_stack+0x1d/0x30 [ 582.322348][T32187] dump_stack_lvl+0xe8/0x140 [ 582.322366][T32187] dump_stack+0x15/0x1b [ 582.322441][T32187] dump_header+0x81/0x220 [ 582.322469][T32187] oom_kill_process+0x342/0x400 [ 582.322560][T32187] out_of_memory+0x979/0xb80 [ 582.322592][T32187] try_charge_memcg+0x5e6/0x9e0 [ 582.322673][T32187] obj_cgroup_charge_pages+0xa6/0x150 [ 582.322706][T32187] __memcg_kmem_charge_page+0x9f/0x170 [ 582.322802][T32187] __alloc_frozen_pages_noprof+0x188/0x360 [ 582.322841][T32187] alloc_pages_mpol+0xb3/0x250 [ 582.322953][T32187] alloc_pages_noprof+0x90/0x130 [ 582.322987][T32187] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 582.323056][T32187] __kvmalloc_node_noprof+0x30f/0x4e0 [ 582.323082][T32187] ? ip_set_alloc+0x1f/0x30 [ 582.323115][T32187] ? ip_set_alloc+0x1f/0x30 [ 582.323223][T32187] ? __kmalloc_cache_noprof+0x189/0x320 [ 582.323253][T32187] ip_set_alloc+0x1f/0x30 [ 582.323284][T32187] hash_netiface_create+0x282/0x740 [ 582.323361][T32187] ? __pfx_hash_netiface_create+0x10/0x10 [ 582.323388][T32187] ip_set_create+0x3c9/0x960 [ 582.323424][T32187] ? __nla_parse+0x40/0x60 [ 582.323449][T32187] nfnetlink_rcv_msg+0x4c6/0x590 [ 582.323504][T32187] netlink_rcv_skb+0x120/0x220 [ 582.323542][T32187] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 582.323571][T32187] nfnetlink_rcv+0x16b/0x1690 [ 582.323695][T32187] ? __list_del_entry_valid_or_report+0x65/0x130 [ 582.323785][T32187] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 582.323814][T32187] ? should_fail_ex+0x30/0x280 [ 582.323892][T32187] ? selinux_nlmsg_lookup+0x99/0x890 [ 582.323994][T32187] ? __rcu_read_unlock+0x34/0x70 [ 582.324038][T32187] ? __netlink_lookup+0x266/0x2a0 [ 582.324064][T32187] netlink_unicast+0x5c0/0x690 [ 582.324098][T32187] netlink_sendmsg+0x58b/0x6b0 [ 582.324141][T32187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.324162][T32187] __sock_sendmsg+0x145/0x180 [ 582.324224][T32187] ____sys_sendmsg+0x31e/0x4e0 [ 582.324328][T32187] ___sys_sendmsg+0x17b/0x1d0 [ 582.324364][T32187] __x64_sys_sendmsg+0xd4/0x160 [ 582.324391][T32187] x64_sys_call+0x191e/0x2ff0 [ 582.324457][T32187] do_syscall_64+0xd2/0x200 [ 582.324482][T32187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 582.324507][T32187] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 582.324556][T32187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.324577][T32187] RIP: 0033:0x7ff4a99bebe9 [ 582.324636][T32187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.324679][T32187] RSP: 002b:00007ff4a841f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.324701][T32187] RAX: ffffffffffffffda RBX: 00007ff4a9be5fa0 RCX: 00007ff4a99bebe9 [ 582.324717][T32187] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 582.324731][T32187] RBP: 00007ff4a9a41e19 R08: 0000000000000000 R09: 0000000000000000 [ 582.324748][T32187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.324759][T32187] R13: 00007ff4a9be6038 R14: 00007ff4a9be5fa0 R15: 00007ffe6be11a78 [ 582.324775][T32187] [ 582.648912][T32187] memory: usage 307200kB, limit 307200kB, failcnt 4143 [ 582.649248][T32219] loop2: detected capacity change from 0 to 8192 [ 582.655824][T32187] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 582.670037][T32187] kmem: usage 307124kB, limit 9007199254740988kB, failcnt 0 [ 582.677344][T32187] Memory cgroup stats for /syz1: [ 582.681839][ T29] audit: type=1326 audit(1755285786.035:58164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 582.688906][T32187] cache 4096 [ 582.710390][ T29] audit: type=1326 audit(1755285786.035:58165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 582.713692][T32187] rss 0 [ 582.739880][T32187] shmem 0 [ 582.742921][T32187] mapped_file 0 [ 582.746415][T32187] dirty 0 [ 582.747018][ T29] audit: type=1326 audit(1755285786.091:58166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 582.749356][T32187] writeback 0 [ 582.749365][T32187] workingset_refault_anon 1424 [ 582.749374][T32187] workingset_refault_file 4181 [ 582.749382][T32187] swap 479232 [ 582.788625][T32222] tmpfs: Unknown parameter '0x0000000000000006' [ 582.789062][T32187] swapcached 0 [ 582.798128][T32222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.798634][T32187] pgpgin 464336 [ 582.798643][T32187] pgpgout 464317 [ 582.798651][T32187] pgfault 476267 [ 582.807500][T32222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.810433][T32187] pgmajfault 677 [ 582.810442][T32187] inactive_anon 0 [ 582.816767][T32222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9286'. [ 582.817509][T32187] active_anon 0 [ 582.817518][T32187] inactive_file 0 [ 582.817526][T32187] active_file 77824 [ 582.852401][T32187] unevictable 0 [ 582.855878][T32187] hierarchical_memory_limit 314572800 [ 582.861241][T32187] hierarchical_memsw_limit 9223372036854771712 [ 582.867380][T32187] total_cache 4096 [ 582.871089][T32187] total_rss 0 [ 582.874351][T32187] total_shmem 0 [ 582.877814][T32187] total_mapped_file 0 [ 582.881768][T32187] total_dirty 0 [ 582.885206][T32187] total_writeback 0 [ 582.889032][T32187] total_workingset_refault_anon 1424 [ 582.894411][T32187] total_workingset_refault_file 4181 [ 582.899936][T32187] total_swap 479232 [ 582.903737][T32187] total_swapcached 0 [ 582.907618][T32187] total_pgpgin 464336 [ 582.911620][T32187] total_pgpgout 464317 [ 582.915710][T32187] total_pgfault 476267 [ 582.919826][T32187] total_pgmajfault 677 [ 582.923951][T32187] total_inactive_anon 0 [ 582.928226][T32187] total_active_anon 0 [ 582.932239][T32187] total_inactive_file 0 [ 582.936397][T32187] total_active_file 77824 [ 582.940772][T32187] total_unevictable 0 [ 582.944830][T32187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.9275,pid=32186,uid=0 [ 582.959588][T32187] Memory cgroup out of memory: Killed process 32186 (syz.1.9275) total-vm:93896kB, anon-rss:1072kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 582.979010][ T29] audit: type=1326 audit(1755285786.303:58167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.002603][ T29] audit: type=1326 audit(1755285786.303:58168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.050308][T32223] loop2: p1 p2 p3 p4[DM] [ 583.061617][T32223] loop2: p1 size 835331 extends beyond EOD, truncated [ 583.076695][T32223] loop2: p2 size 16777223 extends beyond EOD, truncated [ 583.084853][T32223] loop2: p3 start 1052673 is beyond EOD, truncated [ 583.091434][T32223] loop2: p4 size 262144 extends beyond EOD, truncated [ 583.103177][T32219] loop2: p1 p2 p3 p4[DM] [ 583.109702][T32219] loop2: p1 size 835331 extends beyond EOD, truncated [ 583.132120][T32219] loop2: p2 size 16777223 extends beyond EOD, truncated [ 583.140382][T32219] loop2: p3 start 1052673 is beyond EOD, truncated [ 583.146929][T32219] loop2: p4 size 262144 extends beyond EOD, truncated [ 583.160724][T32229] loop8: detected capacity change from 0 to 512 [ 583.173656][T32220] netlink: 'syz.2.9285': attribute type 27 has an invalid length. [ 583.179770][ T29] audit: type=1326 audit(1755285786.488:58169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.205179][ T29] audit: type=1326 audit(1755285786.488:58170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.205492][T32229] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.228818][ T29] audit: type=1326 audit(1755285786.488:58171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.283051][T32229] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 583.285328][ T29] audit: type=1326 audit(1755285786.552:58172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.316476][ T29] audit: type=1326 audit(1755285786.552:58173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32218 comm="syz.2.9285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a2ceaebe9 code=0x7ffc0000 [ 583.317909][T32229] EXT4-fs (loop8): 1 truncate cleaned up [ 583.346713][T29085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.347112][T32229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.391780][T32233] loop4: detected capacity change from 0 to 128 [ 583.446269][T32233] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 583.454272][T32233] FAT-fs (loop4): Filesystem has been set read-only [ 583.462497][T32233] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 583.470361][T32233] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 583.543122][T32240] loop2: detected capacity change from 0 to 128 [ 583.550503][T32246] loop5: detected capacity change from 0 to 512 [ 583.572094][T32240] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 583.573767][T32246] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.579942][T32240] FAT-fs (loop2): Filesystem has been set read-only [ 583.605448][T32246] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 583.616447][T32240] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 583.624298][T32240] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 583.633582][T32240] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 583.634100][T32246] EXT4-fs (loop5): 1 truncate cleaned up [ 583.641824][T32240] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 583.655100][T32240] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 583.673119][T32246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.762884][T31237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.780510][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.803210][T32252] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9295'. [ 583.922918][T32252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32252 comm=syz.5.9295 [ 583.991335][T32257] tmpfs: Unknown parameter '0x0000000000000006' [ 584.024041][T32257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.048069][T32257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.078414][T32257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9297'. [ 584.300409][T32261] syzkaller0: entered promiscuous mode [ 584.305907][T32261] syzkaller0: entered allmulticast mode [ 584.438848][T32267] loop1: detected capacity change from 0 to 512 [ 584.445470][T32267] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.452285][T32267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 584.463062][T32267] EXT4-fs (loop1): 1 truncate cleaned up [ 584.468935][T32267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.502642][T29085] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /208/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 584.524914][T29085] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 584.547047][T29085] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /208/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 584.569351][T29085] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 584.590413][T29085] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /208/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 584.620875][T29085] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 584.622825][T32273] loop2: detected capacity change from 0 to 512 [ 584.652904][T29085] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /208/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 584.676581][T32275] loop4: detected capacity change from 0 to 512 [ 584.683129][T32275] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.690647][T32275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 584.701326][T32273] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 584.713913][T29085] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 584.740342][T29085] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /208/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 584.762935][T32275] EXT4-fs (loop4): 1 truncate cleaned up [ 584.769072][T32275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.781274][T29085] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 584.790907][T32281] loop5: detected capacity change from 0 to 1024 [ 584.807043][T32283] netlink: 'syz.2.9305': attribute type 4 has an invalid length. [ 584.808990][T32273] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 584.820226][T32278] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9307'. [ 584.830120][T32281] EXT4-fs: Ignoring removed bh option [ 584.848654][T32281] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 584.874921][T32281] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 584.880416][T32285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32285 comm=syz.8.9307 [ 584.885052][T32281] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.9308: lblock 2 mapped to illegal pblock 2 (length 1) [ 584.898670][T28889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.928353][T32281] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.9308: lblock 0 mapped to illegal pblock 48 (length 1) [ 584.946426][T32281] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.9308: Failed to acquire dquot type 0 [ 584.966918][T30643] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 584.975890][T32281] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 584.983823][T32289] loop4: detected capacity change from 0 to 512 [ 584.998540][T32289] EXT4-fs: Ignoring removed orlov option [ 584.998706][T32281] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.9308: mark_inode_dirty error [ 585.007601][T32289] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 585.016094][T32281] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 585.025727][T32289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 585.042453][T32281] EXT4-fs (loop5): 1 orphan inode deleted [ 585.045121][T32289] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.9309: corrupted in-inode xattr: e_value size too large [ 585.048906][T32281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.075504][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 585.081130][T32289] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.9309: couldn't read orphan inode 15 (err -117) [ 585.102408][T32289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.115575][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 585.127772][T32296] loop8: detected capacity change from 0 to 128 [ 585.142189][T32289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9309'. [ 585.155437][T32293] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 585.163336][T32293] FAT-fs (loop8): Filesystem has been set read-only [ 585.176294][T32281] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.9308: lblock 0 mapped to illegal pblock 48 (length 1) [ 585.190590][T32293] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 585.198434][T32293] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 585.212535][T29085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.219555][T32296] buffer_io_error: 45710 callbacks suppressed [ 585.219569][T32296] Buffer I/O error on dev loop8, logical block 2065, async page read [ 585.259960][T32296] Buffer I/O error on dev loop8, logical block 2066, async page read [ 585.284843][T32296] Buffer I/O error on dev loop8, logical block 2067, async page read [ 585.294410][T31237] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.317561][T32296] Buffer I/O error on dev loop8, logical block 2068, async page read [ 585.346752][T32296] Buffer I/O error on dev loop8, logical block 2069, async page read [ 585.365847][T32296] Buffer I/O error on dev loop8, logical block 2070, async page read [ 585.383903][T32296] Buffer I/O error on dev loop8, logical block 2071, async page read [ 585.398069][T32296] Buffer I/O error on dev loop8, logical block 2072, async page read [ 585.406739][T32296] Buffer I/O error on dev loop8, logical block 2065, async page read [ 585.417798][T32296] bio_check_eod: 24556 callbacks suppressed [ 585.417813][T32296] syz.8.9310: attempt to access beyond end of device [ 585.417813][T32296] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 585.437206][T32296] Buffer I/O error on dev loop8, logical block 2066, async page read [ 585.445625][T32296] syz.8.9310: attempt to access beyond end of device [ 585.445625][T32296] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 585.459418][T32296] syz.8.9310: attempt to access beyond end of device [ 585.459418][T32296] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 585.473396][T32296] syz.8.9310: attempt to access beyond end of device [ 585.473396][T32296] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 585.474078][ T51] bond0 (unregistering): Released all slaves [ 585.487115][T32296] syz.8.9310: attempt to access beyond end of device [ 585.487115][T32296] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 585.506519][T32296] syz.8.9310: attempt to access beyond end of device [ 585.506519][T32296] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 585.520651][T32304] netlink: 'syz.4.9309': attribute type 1 has an invalid length. [ 585.528378][T32304] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9309'. [ 585.537411][T32304] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 585.555731][T32296] syz.8.9310: attempt to access beyond end of device [ 585.555731][T32296] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 585.570500][T32293] syz.8.9310: attempt to access beyond end of device [ 585.570500][T32293] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 585.584107][T32293] syz.8.9310: attempt to access beyond end of device [ 585.584107][T32293] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 585.597836][T32293] syz.8.9310: attempt to access beyond end of device [ 585.597836][T32293] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 585.615878][ T51] hsr_slave_0: left promiscuous mode [ 585.628338][ T51] hsr_slave_1: left promiscuous mode [ 585.897613][T28889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.926515][T32319] loop8: detected capacity change from 0 to 512 [ 585.936106][T32322] tmpfs: Unknown parameter '0x0000000000000006' [ 585.942938][T32306] chnl_net:caif_netlink_parms(): no params data found [ 585.944250][T32322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.958563][T32322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.960931][T32319] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 585.979745][T32322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9318'. [ 585.980066][T32319] EXT4-fs (loop8): orphan cleanup on readonly fs [ 586.006429][T32319] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9319: Block bitmap for bg 0 marked uninitialized [ 586.021011][T32319] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 586.035336][T32306] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.042430][T32306] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.050965][T32306] bridge_slave_0: entered allmulticast mode [ 586.057458][T32306] bridge_slave_0: entered promiscuous mode [ 586.066682][T32319] EXT4-fs (loop8): 1 orphan inode deleted [ 586.072779][T32319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 586.076205][T32328] loop2: detected capacity change from 0 to 512 [ 586.085629][T32306] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.091457][T32328] EXT4-fs: Ignoring removed mblk_io_submit option [ 586.098314][T32306] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.105561][T32328] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 586.122455][T32306] bridge_slave_1: entered allmulticast mode [ 586.129618][T32306] bridge_slave_1: entered promiscuous mode [ 586.136082][T32328] EXT4-fs (loop2): 1 truncate cleaned up [ 586.139090][T32319] EXT4-fs: Ignoring sb option on remount [ 586.142675][T32328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.147412][T32319] EXT4-fs: Ignoring removed orlov option [ 586.147693][T32319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 586.173080][T32319] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 586.181982][T32319] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 586.183396][T30643] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.191497][T32319] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 586.220322][T32306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.231591][T32306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.249907][T32306] team0: Port device team_slave_0 added [ 586.257214][T32306] team0: Port device team_slave_1 added [ 586.265200][T32332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9321'. [ 586.285097][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.305807][T32306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.312886][T32306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.338801][T32306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.351762][T32306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.358770][T32306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.384871][T32306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.402097][T32332] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32332 comm=syz.2.9321 [ 586.424578][T32340] loop8: detected capacity change from 0 to 1024 [ 586.431718][T32340] EXT4-fs: Ignoring removed bh option [ 586.438699][T32340] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 586.439538][T32306] hsr_slave_0: entered promiscuous mode [ 586.450752][T32340] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 586.455596][T32306] hsr_slave_1: entered promiscuous mode [ 586.465518][T32340] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.9325: lblock 2 mapped to illegal pblock 2 (length 1) [ 586.484810][T32340] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9325: lblock 0 mapped to illegal pblock 48 (length 1) [ 586.495810][T32306] debugfs: 'hsr0' already exists in 'hsr' [ 586.502954][T32340] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.9325: Failed to acquire dquot type 0 [ 586.505437][T32306] Cannot create hsr debugfs directory [ 586.525674][T32340] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 586.535391][T32340] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.9325: mark_inode_dirty error [ 586.547945][T32340] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 586.560478][T32340] EXT4-fs (loop8): 1 orphan inode deleted [ 586.566787][T32340] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.582074][T32348] loop2: detected capacity change from 0 to 512 [ 586.588710][T32348] EXT4-fs: Ignoring removed orlov option [ 586.596003][ T31] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 586.611164][T32348] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 586.613212][T32350] loop4: detected capacity change from 0 to 512 [ 586.619622][ T31] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 586.627262][T32350] EXT4-fs: Ignoring removed mblk_io_submit option [ 586.640254][T32348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 586.644690][T32350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 586.652612][T32340] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9325: lblock 0 mapped to illegal pblock 48 (length 1) [ 586.664597][T32348] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.9328: corrupted in-inode xattr: e_value size too large [ 586.688372][T32350] EXT4-fs (loop4): 1 truncate cleaned up [ 586.692159][T32348] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.9328: couldn't read orphan inode 15 (err -117) [ 586.696934][T32350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.716705][T32348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.753022][T22231] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.768305][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9328'. [ 586.927911][T32350] ================================================================== [ 586.936021][T32350] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 586.945910][T32350] [ 586.948219][T32350] write to 0xffffea00042d0998 of 8 bytes by task 32353 on cpu 0: [ 586.955933][T32350] __filemap_remove_folio+0x1a5/0x2a0 [ 586.961291][T32350] folio_unmap_invalidate+0x1dd/0x360 [ 586.966639][T32350] invalidate_inode_pages2_range+0x27c/0x3d0 [ 586.972598][T32350] filemap_invalidate_pages+0x16d/0x1a0 [ 586.978123][T32350] kiocb_invalidate_pages+0x6e/0x80 [ 586.983300][T32350] __iomap_dio_rw+0x5d4/0x1250 [ 586.988127][T32350] iomap_dio_rw+0x40/0x90 [ 586.992437][T32350] ext4_file_write_iter+0xad9/0xf00 [ 586.997798][T32350] iter_file_splice_write+0x669/0x9e0 [ 587.003155][T32350] direct_splice_actor+0x156/0x2a0 [ 587.008393][T32350] splice_direct_to_actor+0x312/0x680 [ 587.014088][T32350] do_splice_direct+0xda/0x150 [ 587.018866][T32350] do_sendfile+0x380/0x650 [ 587.023380][T32350] __x64_sys_sendfile64+0x105/0x150 [ 587.028614][T32350] x64_sys_call+0x2bb0/0x2ff0 [ 587.033383][T32350] do_syscall_64+0xd2/0x200 [ 587.037867][T32350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.043732][T32350] [ 587.046059][T32350] read to 0xffffea00042d0998 of 8 bytes by task 32350 on cpu 1: [ 587.053667][T32350] folio_mapping+0xa1/0x120 [ 587.058160][T32350] lru_add+0x80/0x430 [ 587.062125][T32350] folio_batch_move_lru+0x177/0x230 [ 587.067301][T32350] lru_add_drain_cpu+0x77/0x250 [ 587.072127][T32350] __folio_batch_release+0x44/0xb0 [ 587.077219][T32350] filemap_splice_read+0x59e/0x740 [ 587.082302][T32350] ext4_file_splice_read+0x8f/0xb0 [ 587.087392][T32350] splice_direct_to_actor+0x26c/0x680 [ 587.092738][T32350] do_splice_direct+0xda/0x150 [ 587.097472][T32350] do_sendfile+0x380/0x650 [ 587.101866][T32350] __x64_sys_sendfile64+0x105/0x150 [ 587.107042][T32350] x64_sys_call+0x2bb0/0x2ff0 [ 587.111710][T32350] do_syscall_64+0xd2/0x200 [ 587.116208][T32350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.122100][T32350] [ 587.124430][T32350] value changed: 0xffff88811a2e4b30 -> 0x0000000000000000 [ 587.131537][T32350] [ 587.133888][T32350] Reported by Kernel Concurrency Sanitizer on: [ 587.140142][T32350] CPU: 1 UID: 0 PID: 32350 Comm: syz.4.9329 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 587.152784][T32350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.162915][T32350] ================================================================== [ 587.175576][T32358] netlink: 'syz.2.9328': attribute type 1 has an invalid length. [ 587.183360][T32358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9328'. [ 587.192507][T32358] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 587.266248][T32306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 587.277409][T32306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 587.289224][T32306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 587.298068][T32306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 587.339394][T32306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.362124][T32306] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.374556][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.381703][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.392941][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.400023][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.457077][T30643] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.514863][T32306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.525405][T28889] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.574390][T32306] veth0_vlan: entered promiscuous mode [ 587.581738][T32306] veth1_vlan: entered promiscuous mode [ 587.596461][T32306] veth0_macvtap: entered promiscuous mode [ 587.604127][T32306] veth1_macvtap: entered promiscuous mode [ 587.614784][T32306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.625966][T32306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.636888][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.646174][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.656962][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.665955][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0